| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·c10094d78b9bd048067a96a9f76d634d·153724·admin·optional·ssg-applications_0.1.76-1_all.deb |
| 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb | 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb |
| 3 | ·fc6593bc87a6d7ac6f6cf28d815e14dc·3723676·admin·optional·ssg-debderived_0.1.76-1_all.deb | ||
| 4 | ·198e22499a32a376b23b1a34276c227b·1230388·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | ·1 | 3 | ·2d61d1de6fdbfed3fae3a45fc81c2dd9·3726008·admin·optional·ssg-debderived_0.1.76-1_all.deb |
| 4 | ·e835943ad4e3137f2093895dadb94ffc·1232500·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | ·d1c66a27b470b7e795c81788bf944c12·37105472·admin·optional·ssg-nondebian_0.1.76-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1724·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1724·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1518 | 3 | -rw-r--r--···0········0········0···151808·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 1675, 15 lines modified | Offset 1675, 15 lines modified | ||
| 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1677 | ··········</xccdf-1.2:check> | 1677 | ··········</xccdf-1.2:check> |
| 1678 | ········</xccdf-1.2:Rule> | 1678 | ········</xccdf-1.2:Rule> |
| 1679 | ······</xccdf-1.2:Group> | 1679 | ······</xccdf-1.2:Group> |
| 1680 | ····</xccdf-1.2:Benchmark> | 1680 | ····</xccdf-1.2:Benchmark> |
| 1681 | ··</ds:component> | 1681 | ··</ds:component> |
| 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-0 | 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1684 | ······<oval-def:generator> | 1684 | ······<oval-def:generator> |
| 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 1687 | ········<oval:schema_version>5.11</oval:schema_version> | 1687 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1689 | ······</oval-def:generator> | 1689 | ······</oval-def:generator> |
| Offset 2539, 368 lines modified | Offset 2539, 368 lines modified | ||
| 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2543 | ······</oval-def:variables> | 2543 | ······</oval-def:variables> |
| 2544 | ····</oval-def:oval_definitions> | 2544 | ····</oval-def:oval_definitions> |
| 2545 | ··</ds:component> | 2545 | ··</ds:component> |
| 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-0 | 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2547 | ····<ocil:ocil> | 2547 | ····<ocil:ocil> |
| 2548 | ······<ocil:generator> | 2548 | ······<ocil:generator> |
| 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2553 | ······</ocil:generator> | 2553 | ······</ocil:generator> |
| 2554 | ······<ocil:questionnaires> | 2554 | ······<ocil:questionnaires> |
| 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 2556 | ··········<ocil:title>Enable·the·Default·Search·Provider</ocil:title> | ||
| 2556 | ··········<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> | ||
| 2557 | ··········<ocil:actions> | ||
| 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> | ||
| 2559 | ··········</ocil:actions> | ||
| 2560 | ········</ocil:questionnaire> | ||
| 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> | ||
| 2562 | ··········<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> | ||
| 2563 | ··········<ocil:actions> | 2557 | ··········<ocil:actions> |
| 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 2565 | ··········</ocil:actions> | 2559 | ··········</ocil:actions> |
| 2566 | ········</ocil:questionnaire> | 2560 | ········</ocil:questionnaire> |
| 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 2568 | ··········<ocil:title> | 2562 | ··········<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 2569 | ··········<ocil:actions> | 2563 | ··········<ocil:actions> |
| 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 2571 | ··········</ocil:actions> | 2565 | ··········</ocil:actions> |
| 2572 | ········</ocil:questionnaire> | 2566 | ········</ocil:questionnaire> |
| 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 2574 | ··········<ocil:title>Disable· | 2568 | ··········<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 2575 | ··········<ocil:actions> | 2569 | ··········<ocil:actions> |
| 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 2577 | ··········</ocil:actions> | 2571 | ··········</ocil:actions> |
| 2578 | ········</ocil:questionnaire> | 2572 | ········</ocil:questionnaire> |
| 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 2580 | ··········<ocil:title>Disable· | 2574 | ··········<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 2581 | ··········<ocil:actions> | 2575 | ··········<ocil:actions> |
| 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 2583 | ··········</ocil:actions> | 2577 | ··········</ocil:actions> |
| 2584 | ········</ocil:questionnaire> | 2578 | ········</ocil:questionnaire> |
| 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> | 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 2586 | ··········<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> | 2580 | ··········<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 2587 | ··········<ocil:actions> | 2581 | ··········<ocil:actions> |
| 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> | 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 2589 | ··········</ocil:actions> | 2583 | ··········</ocil:actions> |
| 2590 | ········</ocil:questionnaire> | 2584 | ········</ocil:questionnaire> |
| 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_p | 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 2592 | ··········<ocil:title>Disable· | 2586 | ··········<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 2593 | ··········<ocil:actions> | 2587 | ··········<ocil:actions> |
| 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_p | 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 2595 | ··········</ocil:actions> | 2589 | ··········</ocil:actions> |
| 2596 | ········</ocil:questionnaire> | 2590 | ········</ocil:questionnaire> |
| 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2598 | ··········<ocil:title> | 2592 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2599 | ··········<ocil:actions> | 2593 | ··········<ocil:actions> |
| 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2601 | ··········</ocil:actions> | 2595 | ··········</ocil:actions> |
| 2602 | ········</ocil:questionnaire> | 2596 | ········</ocil:questionnaire> |
| 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 2604 | ··········<ocil:title>Disable· | 2598 | ··········<ocil:title>Disable·Network·Prediction</ocil:title> |
| 2605 | ··········<ocil:actions> | 2599 | ··········<ocil:actions> |
| 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 2607 | ··········</ocil:actions> | 2601 | ··········</ocil:actions> |
| 2608 | ········</ocil:questionnaire> | 2602 | ········</ocil:questionnaire> |
| 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_ | 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 2610 | ··········<ocil:title>Enable· | 2604 | ··········<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 2611 | ··········<ocil:actions> | 2605 | ··········<ocil:actions> |
| 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_ | 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 2613 | ··········</ocil:actions> | 2607 | ··········</ocil:actions> |
| 2614 | ········</ocil:questionnaire> | 2608 | ········</ocil:questionnaire> |
| 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_autocomplete_ocil:questionnaire:1"> |
| 2616 | ··········<ocil:title> | 2610 | ··········<ocil:title>Disable·the·AutoFill·Feature</ocil:title> |
| 2617 | ··········<ocil:actions> | 2611 | ··········<ocil:actions> |
| 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_autocomplete_action:testaction:1</ocil:test_action_ref> |
| 2619 | ··········</ocil:actions> | 2613 | ··········</ocil:actions> |
| 2620 | ········</ocil:questionnaire> | 2614 | ········</ocil:questionnaire> |
| 2621 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 2622 | ··········<ocil:title> | 2616 | ··········<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 2623 | ··········<ocil:actions> | 2617 | ··········<ocil:actions> |
| 2624 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 67001/79065 bytes (84.74%) of diff not shown. | |||
| Offset 3, 359 lines modified | Offset 3, 359 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> | ||
| 11 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable· | 23 | ······<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable· | 29 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> | 35 | ······<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_p | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable· | 41 | ······<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_p | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·Network·Prediction</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Enable· | 59 | ······<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_autocomplete_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Disable·the·AutoFill·Feature</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_autocomplete_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disallow_location_tracking_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·Location·Tracking</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_disallow_location_tracking_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Disable·Popups</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_popups_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> | ||
| 98 | ······</ocil:actions> | ||
| 99 | ····</ocil:questionnaire> | ||
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> | ||
| 101 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> | ||
| 102 | ······<ocil:actions> | ||
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·Session·Cookies</ocil:title> | 107 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 58583/70270 bytes (83.37%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="eks-node"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="eks-node"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1545, 15 lines modified | Offset 1545, 15 lines modified | ||
| 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1546 | ············</xccdf-1.2:check> | 1546 | ············</xccdf-1.2:check> |
| 1547 | ··········</xccdf-1.2:Rule> | 1547 | ··········</xccdf-1.2:Rule> |
| 1548 | ········</xccdf-1.2:Group> | 1548 | ········</xccdf-1.2:Group> |
| 1549 | ······</xccdf-1.2:Group> | 1549 | ······</xccdf-1.2:Group> |
| 1550 | ····</xccdf-1.2:Benchmark> | 1550 | ····</xccdf-1.2:Benchmark> |
| 1551 | ··</ds:component> | 1551 | ··</ds:component> |
| 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-0 | 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1554 | ······<oval-def:generator> | 1554 | ······<oval-def:generator> |
| 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 1557 | ········<oval:schema_version>5.11</oval:schema_version> | 1557 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1559 | ······</oval-def:generator> | 1559 | ······</oval-def:generator> |
| Offset 2166, 702 lines modified | Offset 2166, 494 lines modified | ||
| 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2169 | ········</oval-def:local_variable> | 2169 | ········</oval-def:local_variable> |
| 2170 | ······</oval-def:variables> | 2170 | ······</oval-def:variables> |
| 2171 | ····</oval-def:oval_definitions> | 2171 | ····</oval-def:oval_definitions> |
| 2172 | ··</ds:component> | 2172 | ··</ds:component> |
| 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-0 | 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2174 | ····<ocil:ocil> | 2174 | ····<ocil:ocil> |
| 2175 | ······<ocil:generator> | 2175 | ······<ocil:generator> |
| 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2180 | ······</ocil:generator> | 2180 | ······</ocil:generator> |
| 2181 | ······<ocil:questionnaires> | 2181 | ······<ocil:questionnaires> |
| 2182 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 2182 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 2183 | ··········<ocil:title>kubelet·-· | 2183 | ··········<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 2184 | ··········<ocil:actions> | 2184 | ··········<ocil:actions> |
| 2185 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 2185 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 2186 | ··········</ocil:actions> | 2186 | ··········</ocil:actions> |
| 2187 | ········</ocil:questionnaire> | 2187 | ········</ocil:questionnaire> |
| 2188 | ········<ocil:questionnaire·id="ocil:ssg- | 2188 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> |
| 2189 | ··········<ocil:title> | 2189 | ··········<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 2190 | ··········<ocil:actions> | 2190 | ··········<ocil:actions> |
| 2191 | ············<ocil:test_action_ref>ocil:ssg- | 2191 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 2192 | ··········</ocil:actions> | 2192 | ··········</ocil:actions> |
| 2193 | ········</ocil:questionnaire> | 2193 | ········</ocil:questionnaire> |
| 2194 | ········<ocil:questionnaire·id="ocil:ssg-configure_ | 2194 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 2195 | ··········<ocil:title> | 2195 | ··········<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 2196 | ··········<ocil:actions> | 2196 | ··········<ocil:actions> |
| 2197 | ············<ocil:test_action_ref>ocil:ssg-configure_ | 2197 | ············<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 2198 | ··········</ocil:actions> | 2198 | ··········</ocil:actions> |
| 2199 | ········</ocil:questionnaire> | 2199 | ········</ocil:questionnaire> |
| 2200 | ········<ocil:questionnaire·id="ocil:ssg- | 2200 | ········<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 2201 | ··········<ocil:title> | 2201 | ··········<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 2202 | ··········<ocil:actions> | 2202 | ··········<ocil:actions> |
| 2203 | ············<ocil:test_action_ref>ocil:ssg- | 2203 | ············<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 2204 | ··········</ocil:actions> | 2204 | ··········</ocil:actions> |
| 2205 | ········</ocil:questionnaire> | 2205 | ········</ocil:questionnaire> |
| 2206 | ········<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> | ||
| 2207 | ········ | 2206 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 2207 | ··········<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 2208 | ··········<ocil:actions> | 2208 | ··········<ocil:actions> |
| 2209 | ············<ocil:test_action_ref>ocil:ssg- | 2209 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 2210 | ··········</ocil:actions> | 2210 | ··········</ocil:actions> |
| 2211 | ········</ocil:questionnaire> | 2211 | ········</ocil:questionnaire> |
| 2212 | ········<ocil:questionnaire·id="ocil:ssg- | 2212 | ········<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 2213 | ··········<ocil:title> | 2213 | ··········<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| Max diff block lines reached; 85343/96752 bytes (88.21%) of diff not shown. | |||
| Offset 3, 693 lines modified | Offset 3, 485 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>kubelet·-· | 11 | ······<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-configure_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-configure_ | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-secret_encryption_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·Kubernetes·Secrets·are·Encrypted</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-secret_encryption_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | ||
| 51 | ····</ocil:questionnaire> | ||
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 53 | ······<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> | ||
| 54 | ······<ocil:actions> | ||
| 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | ||
| 56 | ······</ocil:actions> | ||
| 57 | ····</ocil:questionnaire> | ||
| 58 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> | ||
| 59 | ······<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> | ||
| 60 | ······<ocil:actions> | ||
| 61 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> | ||
| 50 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> | 64 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> | 65 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 54 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> | 67 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·Cluster· | 71 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 60 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-endpoint_configuration_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·Private·Endpoint·Access</ocil:title> |
| 66 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-endpoint_configuration_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> | ||
| 71 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure· | 89 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 78 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 83 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> | ||
| 84 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> | ||
| 89 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> | ||
| 90 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-f | 106 | ····<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 107 | ······<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> |
| 96 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-f | 109 | ········<ocil:test_action_ref>ocil:ssg-fargate_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-read_only_registry_access_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·Cluster·Service·Account·with·read-only·access·to·Amazon·ECR</ocil:title> |
| 102 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-read_only_registry_access_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 119 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 108 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 113 | ···· | 124 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| Max diff block lines reached; 73739/85427 bytes (86.32%) of diff not shown. | |||
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="eks-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="eks-node"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 3488, 15 lines modified | Offset 3488, 15 lines modified | ||
| 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3489 | ············</xccdf-1.2:check> | 3489 | ············</xccdf-1.2:check> |
| 3490 | ··········</xccdf-1.2:Rule> | 3490 | ··········</xccdf-1.2:Rule> |
| 3491 | ········</xccdf-1.2:Group> | 3491 | ········</xccdf-1.2:Group> |
| 3492 | ······</xccdf-1.2:Group> | 3492 | ······</xccdf-1.2:Group> |
| 3493 | ····</xccdf-1.2:Benchmark> | 3493 | ····</xccdf-1.2:Benchmark> |
| 3494 | ··</ds:component> | 3494 | ··</ds:component> |
| 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-0 | 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3497 | ······<oval-def:generator> | 3497 | ······<oval-def:generator> |
| 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 3500 | ········<oval:schema_version>5.11</oval:schema_version> | 3500 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 3502 | ······</oval-def:generator> | 3502 | ······</oval-def:generator> |
| Offset 5198, 377 lines modified | Offset 5198, 436 lines modified | ||
| 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5199 | ············</oval-def:concat> | 5199 | ············</oval-def:concat> |
| 5200 | ··········</oval-def:unique> | 5200 | ··········</oval-def:unique> |
| 5201 | ········</oval-def:local_variable> | 5201 | ········</oval-def:local_variable> |
| 5202 | ······</oval-def:variables> | 5202 | ······</oval-def:variables> |
| 5203 | ····</oval-def:oval_definitions> | 5203 | ····</oval-def:oval_definitions> |
| 5204 | ··</ds:component> | 5204 | ··</ds:component> |
| 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-0 | 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 5206 | ····<ocil:ocil> | 5206 | ····<ocil:ocil> |
| 5207 | ······<ocil:generator> | 5207 | ······<ocil:generator> |
| 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 5212 | ······</ocil:generator> | 5212 | ······</ocil:generator> |
| 5213 | ······<ocil:questionnaires> | 5213 | ······<ocil:questionnaires> |
| 5214 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> | ||
| 5215 | ········ | 5214 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 5215 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | ||
| 5216 | ··········<ocil:actions> | 5216 | ··········<ocil:actions> |
| 5217 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5217 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 5218 | ··········</ocil:actions> | 5218 | ··········</ocil:actions> |
| 5219 | ········</ocil:questionnaire> | 5219 | ········</ocil:questionnaire> |
| 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 5221 | ··········<ocil:title>Disable· | 5221 | ··········<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 5222 | ··········<ocil:actions> | 5222 | ··········<ocil:actions> |
| 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 5224 | ··········</ocil:actions> | 5224 | ··········</ocil:actions> |
| 5225 | ········</ocil:questionnaire> | 5225 | ········</ocil:questionnaire> |
| 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 5227 | ··········<ocil:title> | 5227 | ··········<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 5228 | ··········<ocil:actions> | 5228 | ··········<ocil:actions> |
| 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 5230 | ··········</ocil:actions> | 5230 | ··········</ocil:actions> |
| 5231 | ········</ocil:questionnaire> | 5231 | ········</ocil:questionnaire> |
| 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 5233 | ··········<ocil:title> | 5233 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 5234 | ··········<ocil:actions> | 5234 | ··········<ocil:actions> |
| 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 5236 | ··········</ocil:actions> | 5236 | ··········</ocil:actions> |
| 5237 | ········</ocil:questionnaire> | 5237 | ········</ocil:questionnaire> |
| 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 5239 | ··········<ocil:title>En | 5239 | ··········<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> |
| 5240 | ··········<ocil:actions> | 5240 | ··········<ocil:actions> |
| 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 5242 | ··········</ocil:actions> | 5242 | ··········</ocil:actions> |
| 5243 | ········</ocil:questionnaire> | 5243 | ········</ocil:questionnaire> |
| 5244 | ········<ocil:questionnaire·id="ocil:ssg- | 5244 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5245 | ··········<ocil:title> | 5245 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5246 | ··········<ocil:actions> | 5246 | ··········<ocil:actions> |
| 5247 | ············<ocil:test_action_ref>ocil:ssg- | 5247 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5248 | ··········</ocil:actions> | 5248 | ··········</ocil:actions> |
| 5249 | ········</ocil:questionnaire> | 5249 | ········</ocil:questionnaire> |
| 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-f | 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 5251 | ··········<ocil:title> | 5251 | ··········<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 5252 | ··········<ocil:actions> | 5252 | ··········<ocil:actions> |
| 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-f | 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 5254 | ··········</ocil:actions> | 5254 | ··········</ocil:actions> |
| 5255 | ········</ocil:questionnaire> | 5255 | ········</ocil:questionnaire> |
| 5256 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5256 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 5257 | ··········<ocil:title>Disable· | 5257 | ··········<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 5258 | ··········<ocil:actions> | 5258 | ··········<ocil:actions> |
| 5259 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5259 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 5260 | ··········</ocil:actions> | 5260 | ··········</ocil:actions> |
| 5261 | ········</ocil:questionnaire> | 5261 | ········</ocil:questionnaire> |
| 5262 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5262 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 5263 | ··········<ocil:title>D | 5263 | ··········<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 5264 | ··········<ocil:actions> | 5264 | ··········<ocil:actions> |
| 5265 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5265 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 5266 | ··········</ocil:actions> | 5266 | ··········</ocil:actions> |
| 5267 | ········</ocil:questionnaire> | 5267 | ········</ocil:questionnaire> |
| 5268 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5268 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 5269 | ··········<ocil:title>Disable | 5269 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 5270 | ··········<ocil:actions> | 5270 | ··········<ocil:actions> |
| 5271 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5271 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 5272 | ··········</ocil:actions> | 5272 | ··········</ocil:actions> |
| 5273 | ········</ocil:questionnaire> | 5273 | ········</ocil:questionnaire> |
| 5274 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-p | 5274 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 5275 | ··········<ocil:title> | 5275 | ··········<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 5276 | ··········<ocil:actions> | 5276 | ··········<ocil:actions> |
| 5277 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-p | 5277 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 5278 | ··········</ocil:actions> | 5278 | ··········</ocil:actions> |
| 5279 | ········</ocil:questionnaire> | 5279 | ········</ocil:questionnaire> |
| 5280 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5280 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 5281 | ··········<ocil:title>Disable· | 5281 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 5282 | ··········<ocil:actions> | 5282 | ··········<ocil:actions> |
| 5283 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5283 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 45323/57829 bytes (78.37%) of diff not shown. | |||
| Offset 3, 368 lines modified | Offset 3, 427 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable· | 17 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>En | 35 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-f | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-f | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>D | 59 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable | 65 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-p | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-p | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable· | 77 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-f | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-f | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>En | 89 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-t | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-t | 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 37186/50551 bytes (73.56%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····3044·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····3044·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··372 | 3 | -rw-r--r--···0········0········0··3722772·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15999, 146 lines modified | Offset 15999, 146 lines modified | ||
| 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | ||
| 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e850:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e860:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e870:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e880:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e890:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e8a0:·6d31·3736·3722·3e3c·7461·626c·6520·636c··m1767"><table·cl | |||
| 0003e8b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e8c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e8d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e8e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e8f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e900:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e910:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e920:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e940:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e950:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e960:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e970:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e980:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003e990:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003e9a0:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003e9b0:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003e9c0:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003e9d0:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003e9e0:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003e9f0:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea00:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea10:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea20:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003ea30:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003ea40:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003ea50:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ea60:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003ea70:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003ea80:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003ea90:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eaa0:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eab0:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eac0:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003ead0:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eae0:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eaf0:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb00:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb10:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb20:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eb30:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003eb40:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003eb50:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003eb60:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003eb70:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003eb80:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003eb90:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003eba0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ebb0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ebc0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ebd0:·2223·6964·6d31·3736·3822·2074·6162·696e··"#idm1768"·tabin | |||
| 0003ebe0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ebf0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003e850:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003e860:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003e870:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003e880:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e | 0003e890:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003e | 0003e8a0:·2269·646d·3137·3637·223e·3c74·6162·6c65··"idm1767"><table | ||
| 0003e | 0003e8b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003e | 0003e8c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003e | 0003e8d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003e | 0003e8e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003e | 0003e8f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003e | 0003e900:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003e | 0003e910:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003e | 0003e920:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003e | 0003e930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003e | 0003e940:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003e | 0003e950:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003e | 0003e960:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003e | 0003e970:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003e | 0003e980:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003e | 0003e990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003e | 0003e9a0:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | ||
| 0003e | 0003e9b0:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | ||
| 0003e | 0003e9c0:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | ||
| 0003e | 0003e9d0:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | ||
| 0003e | 0003e9e0:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | ||
| 0003e | 0003e9f0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | ||
| 0003e | 0003ea00:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | ||
| 0003e | 0003ea10:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | ||
| 0003e | 0003ea20:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003e | 0003ea30:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0003e | 0003ea40:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | ||
| 0003e | 0003ea50:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 0003e | 0003ea60:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | ||
| 0003e | 0003ea70:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 0003e | 0003ea80:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 0003e | 0003ea90:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003e | 0003eaa0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003e | 0003eab0:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | ||
| 0003e | 0003eac0:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | ||
| 0003e | 0003ead0:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | ||
| 0003e | 0003eae0:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | ||
| 0003e | 0003eaf0:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | ||
| 0003e | 0003eb00:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | ||
| 0003e | 0003eb10:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003e | 0003eb20:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | ||
| 0003e | 0003eb30:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | ||
| 0003e | 0003eb40:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | ||
| 0003e | 0003eb50:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | ||
| 0003e | 0003eb60:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | ||
| 0003e | 0003eb70:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | ||
| 0003e | 0003eb80:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | ||
| 0003e | 0003eb90:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | ||
| 0003e | 0003eba0:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | ||
| 0003e | 0003ebb0:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | ||
| 0003e | 0003ebc0:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | ||
| 0003e | 0003ebd0:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | ||
| 0003e | 0003ebe0:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | ||
| Max diff block lines reached; 1016880/1035676 bytes (98.19%) of diff not shown. | |||
| Offset 227, 35 lines modified | Offset 227, 14 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 258 | -·name:·Find·/etc/sudoers.d/·files | 239 | -·name:·Find·/etc/sudoers.d/·files |
| 259 | ··ansible.builtin.find: | 240 | ··ansible.builtin.find: |
| Offset 286, 14 lines modified | Offset 265, 35 lines modified | ||
| 286 | ··-·NIST-800-53-IA-11 | 265 | ··-·NIST-800-53-IA-11 |
| 287 | ··-·low_complexity | 266 | ··-·low_complexity |
| 288 | ··-·low_disruption | 267 | ··-·low_disruption |
| 289 | ··-·medium_severity | 268 | ··-·medium_severity |
| 290 | ··-·no_reboot_needed | 269 | ··-·no_reboot_needed |
| 291 | ··-·restrict_strategy | 270 | ··-·restrict_strategy |
| 292 | ··-·sudo_remove_no_authenticate | 271 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 297 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 35 lines modified | Offset 314, 14 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 345 | -·name:·Find·/etc/sudoers.d/·files | 326 | -·name:·Find·/etc/sudoers.d/·files |
| 346 | ··ansible.builtin.find: | 327 | ··ansible.builtin.find: |
| Offset 373, 14 lines modified | Offset 352, 35 lines modified | ||
| 373 | ··-·NIST-800-53-IA-11 | 352 | ··-·NIST-800-53-IA-11 |
| 374 | ··-·low_complexity | 353 | ··-·low_complexity |
| 375 | ··-·low_disruption | 354 | ··-·low_disruption |
| 376 | ··-·medium_severity | 355 | ··-·medium_severity |
| 377 | ··-·no_reboot_needed | 356 | ··-·no_reboot_needed |
| 378 | ··-·restrict_strategy | 357 | ··-·restrict_strategy |
| 379 | ··-·sudo_remove_nopasswd | 358 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 119057/124505 bytes (95.62%) of diff not shown. | |||
| Offset 16020, 146 lines modified | Offset 16020, 146 lines modified | ||
| 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | ||
| 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e9a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e9b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e9c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e9d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e9e0:·3d22·6964·6d31·3736·3722·3e3c·7461·626c··="idm1767"><tabl | |||
| 0003e9f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ea00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ea10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ea20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ea30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ea40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ea60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ea70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ea90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003eaa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003eab0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003eac0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003ead0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003eae0:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003eaf0:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003eb00:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003eb10:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003eb20:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003eb30:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003eb40:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003eb50:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003eb60:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003eb70:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003eb80:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003eb90:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003eba0:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ebb0:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ebc0:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ebd0:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ebe0:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ebf0:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ec00:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ec10:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003ec20:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003ec30:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003ec40:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ec50:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003ec60:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003ec70:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003ec80:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003ec90:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eca0:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003ecb0:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003ecc0:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003ecd0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ece0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ecf0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ed00:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ed10:·6765·743d·2223·6964·6d31·3736·3822·2074··get="#idm1768"·t | |||
| 0003ed20:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ed30:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ed40:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ed50:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ed60:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ed70:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003e9a0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003e9b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003e9c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003e9d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003e9e0:·2069·643d·2269·646d·3137·3637·223e·3c74···id="idm1767"><t | ||
| 0003e | 0003e9f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003ea00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003ea10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003ea20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e | 0003ea30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003e | 0003ea40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003e | 0003ea50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003e | 0003ea60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003e | 0003ea70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003e | 0003ea80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003e | 0003ea90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003e | 0003eaa0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003e | 0003eab0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003e | 0003eac0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003e | 0003ead0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003e | 0003eae0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003e | 0003eaf0:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | ||
| 0003e | 0003eb00:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | ||
| 0003e | 0003eb10:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | ||
| 0003e | 0003eb20:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | ||
| 0003e | 0003eb30:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | ||
| 0003e | 0003eb40:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | ||
| 0003e | 0003eb50:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | ||
| 0003e | 0003eb60:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003e | 0003eb70:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | ||
| 0003e | 0003eb80:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | ||
| 0003e | 0003eb90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0003e | 0003eba0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | ||
| 0003e | 0003ebb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | ||
| 0003e | 0003ebc0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | ||
| 0003e | 0003ebd0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003e | 0003ebe0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003e | 0003ebf0:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | ||
| 0003e | 0003ec00:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | ||
| 0003e | 0003ec10:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | ||
| 0003 | 0003ec20:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | ||
| 0003 | 0003ec30:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | ||
| 0003 | 0003ec40:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | ||
| 0003 | 0003ec50:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | ||
| 0003 | 0003ec60:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | ||
| 0003 | 0003ec70:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | ||
| 0003 | 0003ec80:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | ||
| 0003 | 0003ec90:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | ||
| 0003 | 0003eca0:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | ||
| 0003 | 0003ecb0:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | ||
| 0003 | 0003ecc0:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | ||
| 0003 | 0003ecd0:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | ||
| 0003 | 0003ece0:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | ||
| 0003 | 0003ecf0:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | ||
| 0003 | 0003ed00:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | ||
| 0003 | 0003ed10:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | ||
| 0003 | 0003ed20:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | ||
| 0003 | 0003ed30:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | ||
| Max diff block lines reached; 1165577/1184373 bytes (98.41%) of diff not shown. | |||
| Offset 231, 35 lines modified | Offset 231, 14 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 262 | -·name:·Find·/etc/sudoers.d/·files | 243 | -·name:·Find·/etc/sudoers.d/·files |
| 263 | ··ansible.builtin.find: | 244 | ··ansible.builtin.find: |
| Offset 290, 14 lines modified | Offset 269, 35 lines modified | ||
| 290 | ··-·NIST-800-53-IA-11 | 269 | ··-·NIST-800-53-IA-11 |
| 291 | ··-·low_complexity | 270 | ··-·low_complexity |
| 292 | ··-·low_disruption | 271 | ··-·low_disruption |
| 293 | ··-·medium_severity | 272 | ··-·medium_severity |
| 294 | ··-·no_reboot_needed | 273 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 274 | ··-·restrict_strategy |
| 296 | ··-·sudo_remove_no_authenticate | 275 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 303 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 35 lines modified | Offset 318, 14 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Find·/etc/sudoers.d/·files | 330 | -·name:·Find·/etc/sudoers.d/·files |
| 350 | ··ansible.builtin.find: | 331 | ··ansible.builtin.find: |
| Offset 377, 14 lines modified | Offset 356, 35 lines modified | ||
| 377 | ··-·NIST-800-53-IA-11 | 356 | ··-·NIST-800-53-IA-11 |
| 378 | ··-·low_complexity | 357 | ··-·low_complexity |
| 379 | ··-·low_disruption | 358 | ··-·low_disruption |
| 380 | ··-·medium_severity | 359 | ··-·medium_severity |
| 381 | ··-·no_reboot_needed | 360 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 361 | ··-·restrict_strategy |
| 383 | ··-·sudo_remove_nopasswd | 362 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139136/144584 bytes (96.23%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3736·3722·3e3c·7461·626c·6520··idm1767"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3736·3822·2074·6162··t="#idm1768"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039bd0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039be0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039bf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039c00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039 | 00039c10:·643d·2269·646d·3137·3637·223e·3c74·6162··d="idm1767"><tab | ||
| 0003 | 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003 | 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003 | 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003 | 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003 | 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003 | 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003 | 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003 | 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003 | 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003 | 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003 | 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003 | 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003 | 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003 | 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003 | 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | ||
| 0003 | 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | ||
| 0003 | 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | ||
| 0003 | 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | ||
| 0003 | 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | ||
| 0003 | 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | ||
| 0003 | 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | ||
| 0003 | 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | ||
| 0003 | 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | ||
| 0003 | 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | ||
| 0003 | 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | ||
| 0003 | 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | ||
| 0003 | 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | ||
| 0003 | 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | ||
| 0003 | 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003 | 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003 | 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | ||
| 0003 | 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | ||
| 0003 | 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | ||
| 0003 | 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | ||
| 0003 | 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | ||
| 0003 | 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | ||
| 0003 | 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | ||
| 0003 | 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | ||
| 0003 | 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | ||
| 0003 | 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | ||
| 0003 | 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | ||
| 0003 | 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | ||
| 0003 | 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | ||
| 0003 | 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | ||
| 0003 | 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | ||
| 0003 | 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | ||
| 0003 | 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | ||
| 0003 | 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | ||
| 0003 | 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | ||
| 0003 | 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | ||
| Max diff block lines reached; 274130/293064 bytes (93.54%) of diff not shown. | |||
| Offset 90, 35 lines modified | Offset 90, 14 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Find·/etc/sudoers.d/·files | 102 | -·name:·Find·/etc/sudoers.d/·files |
| 122 | ··ansible.builtin.find: | 103 | ··ansible.builtin.find: |
| Offset 149, 14 lines modified | Offset 128, 35 lines modified | ||
| 149 | ··-·NIST-800-53-IA-11 | 128 | ··-·NIST-800-53-IA-11 |
| 150 | ··-·low_complexity | 129 | ··-·low_complexity |
| 151 | ··-·low_disruption | 130 | ··-·low_disruption |
| 152 | ··-·medium_severity | 131 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 132 | ··-·no_reboot_needed |
| 154 | ··-·restrict_strategy | 133 | ··-·restrict_strategy |
| 155 | ··-·sudo_remove_no_authenticate | 134 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 162 | ············Without·re-authentication,·users·may·access·resources·or·perform | 160 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 35 lines modified | Offset 177, 14 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 208 | -·name:·Find·/etc/sudoers.d/·files | 189 | -·name:·Find·/etc/sudoers.d/·files |
| 209 | ··ansible.builtin.find: | 190 | ··ansible.builtin.find: |
| Offset 236, 14 lines modified | Offset 215, 35 lines modified | ||
| 236 | ··-·NIST-800-53-IA-11 | 215 | ··-·NIST-800-53-IA-11 |
| 237 | ··-·low_complexity | 216 | ··-·low_complexity |
| 238 | ··-·low_disruption | 217 | ··-·low_disruption |
| 239 | ··-·medium_severity | 218 | ··-·medium_severity |
| 240 | ··-·no_reboot_needed | 219 | ··-·no_reboot_needed |
| 241 | ··-·restrict_strategy | 220 | ··-·restrict_strategy |
| 242 | ··-·sudo_remove_nopasswd | 221 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34899/40356 bytes (86.48%) of diff not shown. | |||
| Offset 16010, 146 lines modified | Offset 16010, 146 lines modified | ||
| 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | ||
| 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003e900:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003e910:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003e920:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003e930:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003e940:·6170·7365·2220·6964·3d22·6964·6d31·3736··apse"·id="idm176 | |||
| 0003e950:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003e960:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003e970:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003e980:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003e990:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003e9a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003e9b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003e9d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003e9f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ea00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ea10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ea20:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ea30:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ea40:·653e·3c70·7265·3e3c·636f·6465·3e0a·666f··e><pre><code>.fo | |||
| 0003ea50:·7220·6620·696e·202f·6574·632f·7375·646f··r·f·in·/etc/sudo | |||
| 0003ea60:·6572·7320·2f65·7463·2f73·7564·6f65·7273··ers·/etc/sudoers | |||
| 0003ea70:·2e64·2f2a·203b·2064·6f0a·2020·6966·205b··.d/*·;·do.··if·[ | |||
| 0003ea80:·2021·202d·6520·2224·6622·205d·203b·2074···!·-e·"$f"·]·;·t | |||
| 0003ea90:·6865·6e0a·2020·2020·636f·6e74·696e·7565··hen.····continue | |||
| 0003eaa0:·0a20·2066·690a·2020·6d61·7463·6869·6e67··.··fi.··matching | |||
| 0003eab0:·5f6c·6973·743d·2428·6772·6570·202d·5020··_list=$(grep·-P· | |||
| 0003eac0:·275e·283f·2123·292e·2a5b·5c73·5d2b·5c21··'^(?!#).*[\s]+\! | |||
| 0003ead0:·6175·7468·656e·7469·6361·7465·2e2a·2427··authenticate.*$' | |||
| 0003eae0:·2024·6620·7c20·756e·6971·2029·0a20·2069···$f·|·uniq·).··i | |||
| 0003eaf0:·6620·2120·7465·7374·202d·7a20·2224·6d61··f·!·test·-z·"$ma | |||
| 0003eb00:·7463·6869·6e67·5f6c·6973·7422·3b20·7468··tching_list";·th | |||
| 0003eb10:·656e·0a20·2020·2077·6869·6c65·2049·4653··en.····while·IFS | |||
| 0003eb20:·3d20·7265·6164·202d·7220·656e·7472·793b··=·read·-r·entry; | |||
| 0003eb30:·2064·6f0a·2020·2020·2020·2320·636f·6d6d···do.······#·comm | |||
| 0003eb40:·656e·7420·6f75·7420·2221·6175·7468·656e··ent·out·"!authen | |||
| 0003eb50:·7469·6361·7465·2220·6d61·7463·6865·7320··ticate"·matches· | |||
| 0003eb60:·746f·2070·7265·7365·7276·6520·7573·6572··to·preserve·user | |||
| 0003eb70:·2064·6174·610a·2020·2020·2020·7365·6420···data.······sed· | |||
| 0003eb80:·2d69·2022·732f·5e24·7b65·6e74·7279·7d24··-i·"s/^${entry}$ | |||
| 0003eb90:·2f23·2026·616d·703b·2f67·2220·2466·0a20··/#·&/g"·$f.· | |||
| 0003eba0:·2020·2064·6f6e·6520·266c·743b·266c·743b·····done·<< | |||
| 0003ebb0:·266c·743b·2022·246d·6174·6368·696e·675f··<·"$matching_ | |||
| 0003ebc0:·6c69·7374·220a·0a20·2020·202f·7573·722f··list"..····/usr/ | |||
| 0003ebd0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | |||
| 0003ebe0:·2466·2026·616d·703b·2667·743b·202f·6465··$f·&>·/de | |||
| 0003ebf0:·762f·6e75·6c6c·207c·7c20·6563·686f·2022··v/null·||·echo·" | |||
| 0003ec00:·4661·696c·2074·6f20·7661·6c69·6461·7465··Fail·to·validate | |||
| 0003ec10:·2024·6620·7769·7468·2076·6973·7564·6f22···$f·with·visudo" | |||
| 0003ec20:·0a20·2066·690a·646f·6e65·0a3c·2f63·6f64··.··fi.done.</cod | |||
| 0003ec30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ec40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ec50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ec60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ec70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ec80:·6d31·3736·3822·2074·6162·696e·6465·783d··m1768"·tabindex= | |||
| 0003ec90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003eca0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ecb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ecc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ecd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003e | 0003e900:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003e | 0003e910:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003e | 0003e920:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003e | 0003e930:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003e | 0003e940:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003e | 0003e950:·3137·3637·223e·3c74·6162·6c65·2063·6c61··1767"><table·cla | ||
| 0003e | 0003e960:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003e | 0003e970:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003e | 0003e980:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003e | 0003e990:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003e | 0003e9a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003e | 0003e9b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003e | 0003e9c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003e | 0003e9d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003e | 0003e9e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003e | 0003e9f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003e | 0003ea00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003e | 0003ea10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003e | 0003ea20:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003e | 0003ea30:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003e | 0003ea40:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003e | 0003ea50:·2d20·6e61·6d65·3a20·4669·6e64·202f·6574··-·name:·Find·/et | ||
| 0003e | 0003ea60:·632f·7375·646f·6572·732e·642f·2066·696c··c/sudoers.d/·fil | ||
| 0003e | 0003ea70:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | ||
| 0003e | 0003ea80:·6c74·696e·2e66·696e·643a·0a20·2020·2070··ltin.find:.····p | ||
| 0003e | 0003ea90:·6174·6873·3a0a·2020·2020·2d20·2f65·7463··aths:.····-·/etc | ||
| 0003e | 0003eaa0:·2f73·7564·6f65·7273·2e64·2f0a·2020·7265··/sudoers.d/.··re | ||
| 0003e | 0003eab0:·6769·7374·6572·3a20·7375·646f·6572·730a··gister:·sudoers. | ||
| 0003e | 0003eac0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | ||
| 0003e | 0003ead0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| 0003e | 0003eae0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003e | 0003eaf0:·4941·2d31·310a·2020·2d20·6c6f·775f·636f··IA-11.··-·low_co | ||
| 0003e | 0003eb00:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | ||
| 0003e | 0003eb10:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003e | 0003eb20:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | ||
| 0003e | 0003eb30:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003e | 0003eb40:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003e | 0003eb50:·745f·7374·7261·7465·6779·0a20·202d·2073··t_strategy.··-·s | ||
| 0003e | 0003eb60:·7564·6f5f·7265·6d6f·7665·5f6e·6f5f·6175··udo_remove_no_au | ||
| 0003e | 0003eb70:·7468·656e·7469·6361·7465·0a0a·2d20·6e61··thenticate..-·na | ||
| 0003e | 0003eb80:·6d65·3a20·5265·6d6f·7665·206c·696e·6573··me:·Remove·lines | ||
| 0003e | 0003eb90:·2063·6f6e·7461·696e·696e·6720·2161·7574···containing·!aut | ||
| 0003e | 0003eba0:·6865·6e74·6963·6174·6520·6672·6f6d·2073··henticate·from·s | ||
| 0003e | 0003ebb0:·7564·6f65·7273·2066·696c·6573·0a20·2061··udoers·files.··a | ||
| 0003e | 0003ebc0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e72··nsible.builtin.r | ||
| 0003e | 0003ebd0:·6570·6c61·6365·3a0a·2020·2020·7265·6765··eplace:.····rege | ||
| 0003e | 0003ebe0:·7870·3a20·285e·283f·2123·292e·2a5b·5c73··xp:·(^(?!#).*[\s | ||
| 0003e | 0003ebf0:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | ||
| 0003e | 0003ec00:·2e2a·2429·0a20·2020·2072·6570·6c61·6365··.*$).····replace | ||
| 0003e | 0003ec10:·3a20·2723·205c·6726·6c74·3b31·2667·743b··:·'#·\g<1> | ||
| 0003 | 0003ec20:·270a·2020·2020·7061·7468·3a20·277b·7b20··'.····path:·'{{· | ||
| 0003 | 0003ec30:·6974·656d·2e70·6174·6820·7d7d·270a·2020··item.path·}}'.·· | ||
| 0003 | 0003ec40:·2020·7661·6c69·6461·7465·3a20·2f75·7372····validate:·/usr | ||
| 0003 | 0003ec50:·2f73·6269·6e2f·7669·7375·646f·202d·6366··/sbin/visudo·-cf | ||
| 0003 | 0003ec60:·2025·730a·2020·7769·7468·5f69·7465·6d73···%s.··with_items | ||
| 0003 | 0003ec70:·3a0a·2020·2d20·7061·7468·3a20·2f65·7463··:.··-·path:·/etc | ||
| 0003 | 0003ec80:·2f73·7564·6f65·7273·0a20·202d·2027·7b7b··/sudoers.··-·'{{ | ||
| 0003 | 0003ec90:·2073·7564·6f65·7273·2e66·696c·6573·207d···sudoers.files·} | ||
| Max diff block lines reached; 1165327/1184123 bytes (98.41%) of diff not shown. | |||
| Offset 229, 35 lines modified | Offset 229, 14 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 260 | -·name:·Find·/etc/sudoers.d/·files | 241 | -·name:·Find·/etc/sudoers.d/·files |
| 261 | ··ansible.builtin.find: | 242 | ··ansible.builtin.find: |
| Offset 288, 14 lines modified | Offset 267, 35 lines modified | ||
| 288 | ··-·NIST-800-53-IA-11 | 267 | ··-·NIST-800-53-IA-11 |
| 289 | ··-·low_complexity | 268 | ··-·low_complexity |
| 290 | ··-·low_disruption | 269 | ··-·low_disruption |
| 291 | ··-·medium_severity | 270 | ··-·medium_severity |
| 292 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 293 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 294 | ··-·sudo_remove_no_authenticate | 273 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 35 lines modified | Offset 316, 14 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 347 | -·name:·Find·/etc/sudoers.d/·files | 328 | -·name:·Find·/etc/sudoers.d/·files |
| 348 | ··ansible.builtin.find: | 329 | ··ansible.builtin.find: |
| Offset 375, 14 lines modified | Offset 354, 35 lines modified | ||
| 375 | ··-·NIST-800-53-IA-11 | 354 | ··-·NIST-800-53-IA-11 |
| 376 | ··-·low_complexity | 355 | ··-·low_complexity |
| 377 | ··-·low_disruption | 356 | ··-·low_disruption |
| 378 | ··-·medium_severity | 357 | ··-·medium_severity |
| 379 | ··-·no_reboot_needed | 358 | ··-·no_reboot_needed |
| 380 | ··-·restrict_strategy | 359 | ··-·restrict_strategy |
| 381 | ··-·sudo_remove_nopasswd | 360 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139082/144530 bytes (96.23%) of diff not shown. | |||
| Offset 16217, 783 lines modified | Offset 16217, 783 lines modified | ||
| 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | ||
| 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003f600:·6 | 0003f600:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003f610:·2f61 | 0003f610:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003f620:·733d | 0003f620:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003f630:·6 | 0003f630:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003f640:·6964 | 0003f640:·643d·2269·646d·3439·3639·223e·3c74·6162··d="idm4969"><tab | ||
| 0003f650:·6 | 0003f650:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003f660:· | 0003f660:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003f670:·6 | 0003f670:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003f680:· | 0003f680:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003f690:· | 0003f690:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003f6a0:·2 | 0003f6a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003f6b0:·6 | 0003f6b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003f6c0:· | 0003f6c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003f6d0:· | 0003f6d0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003f6e0:· | 0003f6e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003f6f0:· | 0003f6f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003f700:· | 0003f700:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003f710:· | 0003f710:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003f720:· | 0003f720:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | ||
| 0003f730:· | 0003f730:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003f740:· | 0003f740:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003f750:· | 0003f750:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | ||
| 0003f760:·6 | 0003f760:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | ||
| 0003f770:·6 | 0003f770:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | ||
| 0003f780:· | 0003f780:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | ||
| 0003f790:· | 0003f790:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | ||
| 0003f7a0:· | 0003f7a0:·3030·2d35·332d·4143·2d36·2831·290a·2020··00-53-AC-6(1).·· | ||
| 0003f7b0:·2 | 0003f7b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003f7c0:· | 0003f7c0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | ||
| 0003f7d0:· | 0003f7d0:·532d·5265·712d·3130·2e35·2e31·0a20·202d··S-Req-10.5.1.··- | ||
| 0003f7e0:· | 0003f7e0:·2050·4349·2d44·5353·2d52·6571·2d31·302e···PCI-DSS-Req-10. | ||
| 0003f7f0:· | 0003f7f0:·352e·320a·2020·2d20·5043·492d·4453·5376··5.2.··-·PCI-DSSv | ||
| 0003f800:· | 0003f800:·342d·3130·2e33·0a20·202d·2050·4349·2d44··4-10.3.··-·PCI-D | ||
| 0003f810:· | 0003f810:·5353·7634·2d31·302e·332e·320a·2020·2d20··SSv4-10.3.2.··-· | ||
| 0003f820:· | 0003f820:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | ||
| 0003f830:· | 0003f830:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | ||
| 0003f840:·657 | 0003f840:·6578·6974·790a·2020·2d20·6d65·6469·756d··exity.··-·medium | ||
| 0003f850:·6 | 0003f850:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003f860:·6 | 0003f860:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | ||
| 0003f870:·20 | 0003f870:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003f880:· | 0003f880:·6564·6564·0a20·202d·2072·7379·736c·6f67··eded.··-·rsyslog | ||
| 0003f890:· | 0003f890:·5f66·696c·6573·5f67·726f·7570·6f77·6e65··_files_groupowne | ||
| 0003f8a0:· | 0003f8a0:·7273·6869·700a·0a2d·206e·616d·653a·2045··rship..-·name:·E | ||
| 0003f8b0:·6 | 0003f8b0:·6e73·7572·6520·4c6f·6720·4669·6c65·7320··nsure·Log·Files· | ||
| 0003f8c0:· | 0003f8c0:·4172·6520·4f77·6e65·6420·4279·2041·7070··Are·Owned·By·App | ||
| 0003f8d0:· | 0003f8d0:·726f·7072·6961·7465·2047·726f·7570·202d··ropriate·Group·- | ||
| 0003f8e0:·20 | 0003f8e0:·2053·6574·2072·7379·736c·6f67·206c·6f67···Set·rsyslog·log | ||
| 0003f8f0:· | 0003f8f0:·6669·6c65·2063·6f6e·6669·6775·7261·7469··file·configurati | ||
| 0003f900:· | 0003f900:·6f6e·0a20·2020·2066·6163·7473·0a20·2061··on.····facts.··a | ||
| 0003f910:· | 0003f910:·6e73·6962·6c65·2e62·7569·6c74·696e·2e73··nsible.builtin.s | ||
| 0003f920:· | 0003f920:·6574·5f66·6163·743a·0a20·2020·2072·7379··et_fact:.····rsy | ||
| 0003f930:· | 0003f930:·736c·6f67·5f65·7463·5f63·6f6e·6669·673a··slog_etc_config: | ||
| 0003f940:· | 0003f940:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 0003f950:· | 0003f950:·6e66·0a20·2077·6865·6e3a·0a20·202d·2027··nf.··when:.··-·' | ||
| 0003f960:· | 0003f960:·226c·696e·7578·2d62·6173·6522·2069·6e20··"linux-base"·in· | ||
| 0003f970:·6 | 0003f970:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003f980:· | 0003f980:·636b·6167·6573·270a·2020·2d20·2722·7273··ckages'.··-·'"rs | ||
| 0003f990:· | 0003f990:·7973·6c6f·6722·2069·6e20·616e·7369·626c··yslog"·in·ansibl | ||
| 0003f9a0:· | 0003f9a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003f9b0:· | 0003f9b0:·270a·2020·7461·6773·3a0a·2020·2d20·4e49··'.··tags:.··-·NI | ||
| 0003f9c0:· | 0003f9c0:·5354·2d38·3030·2d35·332d·4143·2d36·2831··ST-800-53-AC-6(1 | ||
| 0003f9d0:· | 0003f9d0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003f9e0:· | 0003f9e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | ||
| 0003f9f0:· | 0003f9f0:·492d·4453·532d·5265·712d·3130·2e35·2e31··I-DSS-Req-10.5.1 | ||
| 0003fa00:· | 0003fa00:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003fa10:· | 0003fa10:·2d31·302e·352e·320a·2020·2d20·5043·492d··-10.5.2.··-·PCI- | ||
| 0003fa20:· | 0003fa20:·4453·5376·342d·3130·2e33·0a20·202d·2050··DSSv4-10.3.··-·P | ||
| 0003fa30:· | 0003fa30:·4349·2d44·5353·7634·2d31·302e·332e·320a··CI-DSSv4-10.3.2. | ||
| 0003fa40:· | 0003fa40:·2020·2d20·636f·6e66·6967·7572·655f·7374····-·configure_st | ||
| 0003fa50:·617 | 0003fa50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | ||
| 0003fa60:· | 0003fa60:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | ||
| 0003fa70:·6 | 0003fa70:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003fa80:·2 | 0003fa80:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 0003fa90:·64 | 0003fa90:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 0003faa0:· | 0003faa0:·745f·6e65·6564·6564·0a20·202d·2072·7379··t_needed.··-·rsy | ||
| 0003fab0:· | 0003fab0:·736c·6f67·5f66·696c·6573·5f67·726f·7570··slog_files_group | ||
| 0003fac0:·6 | 0003fac0:·6f77·6e65·7273·6869·700a·0a2d·206e·616d··ownership..-·nam | ||
| 0003fad0:·6 | 0003fad0:·653a·2045·6e73·7572·6520·4c6f·6720·4669··e:·Ensure·Log·Fi | ||
| 0003fae0:· | 0003fae0:·6c65·7320·4172·6520·4f77·6e65·6420·4279··les·Are·Owned·By | ||
| 0003faf0:· | 0003faf0:·2041·7070·726f·7072·6961·7465·2047·726f···Appropriate·Gro | ||
| 0003fb00:·7 | 0003fb00:·7570·202d·2047·6574·2049·6e63·6c75·6465··up·-·Get·Include | ||
| 0003fb10:· | 0003fb10:·436f·6e66·6967·2064·6972·6563·7469·7665··Config·directive | ||
| 0003fb20:· | 0003fb20:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003fb30:· | 0003fb30:·696e·2e73·6865·6c6c·3a20·7c0a·2020·2020··in.shell:·|.···· | ||
| 0003fb40:· | 0003fb40:·7365·7420·2d6f·2070·6970·6566·6169·6c0a··set·-o·pipefail. | ||
| 0003fb50:· | 0003fb50:·2020·2020·6772·6570·202d·6520·2724·496e······grep·-e·'$In | ||
| 0003fb60:· | 0003fb60:·636c·7564·6543·6f6e·6669·6727·207b·7b20··cludeConfig'·{{· | ||
| 0003fb70:· | 0003fb70:·7273·7973·6c6f·675f·6574·635f·636f·6e66··rsyslog_etc_conf | ||
| 0003fb80:· | 0003fb80:·6967·207d·7d20·7c20·6375·7420·2d64·2027··ig·}}·|·cut·-d·' | ||
| 0003fb90:· | 0003fb90:·2027·202d·6620·3220·7c7c·2074·7275·650a···'·-f·2·||·true. | ||
| 0003fba0:· | 0003fba0:·2020·7265·6769·7374·6572·3a20·7273·7973····register:·rsys | ||
| 0003fbb0:· | 0003fbb0:·6c6f·675f·6f6c·645f·696e·630a·2020·6368··log_old_inc.··ch | ||
| 0003fbc0:·6 | 0003fbc0:·616e·6765·645f·7768·656e·3a20·6661·6c73··anged_when:·fals | ||
| 0003fbd0:·6 | 0003fbd0:·650a·2020·7768·656e·3a0a·2020·2d20·2722··e.··when:.··-·'" | ||
| 0003fbe0:·6 | 0003fbe0:·6c69·6e75·782d·6261·7365·2220·696e·2061··linux-base"·in·a | ||
| 0003fbf0:· | 0003fbf0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003fc00:·6 | 0003fc00:·6b61·6765·7327·0a20·202d·2027·2272·7379··kages'.··-·'"rsy | ||
| 0003fc10:· | 0003fc10:·736c·6f67·2220·696e·2061·6e73·6962·6c65··slog"·in·ansible | ||
| 0003fc20:· | 0003fc20:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 0003fc30:· | 0003fc30:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | ||
| 0003fc40:· | 0003fc40:·542d·3830·302d·3533·2d41·432d·3628·3129··T-800-53-AC-6(1) | ||
| 0003fc50:· | 0003fc50:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003fc60:· | 0003fc60:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | ||
| 0003fc70:· | 0003fc70:·2d44·5353·2d52·6571·2d31·302e·352e·310a··-DSS-Req-10.5.1. | ||
| 0003fc80:· | 0003fc80:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003fc90:· | 0003fc90:·3130·2e35·2e32·0a20·202d·2050·4349·2d44··10.5.2.··-·PCI-D | ||
| 0003fca0:·5 | 0003fca0:·5353·7634·2d31·302e·330a·2020·2d20·5043··SSv4-10.3.··-·PC | ||
| 0003fcb0:·4 | 0003fcb0:·492d·4453·5376·342d·3130·2e33·2e32·0a20··I-DSSv4-10.3.2.· | ||
| 0003fcc0:· | 0003fcc0:·202d·2063·6f6e·6669·6775·7265·5f73·7472···-·configure_str | ||
| 0003fcd0:· | 0003fcd0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | ||
| 0003fce0:· | 0003fce0:·6d70·6c65·7869·7479·0a20·202d·206d·6564··mplexity.··-·med | ||
| 0003fcf0:· | 0003fcf0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003fd00:· | 0003fd00:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | ||
| 0003fd10:· | 0003fd10:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | ||
| 0003fd20:· | 0003fd20:·5f6e·6565·6465·640a·2020·2d20·7273·7973··_needed.··-·rsys | ||
| 0003fd30:·6 | 0003fd30:·6c6f·675f·6669·6c65·735f·6772·6f75·706f··log_files_groupo | ||
| 0003fd40:·7 | 0003fd40:·776e·6572·7368·6970·0a0a·2d20·6e61·6d65··wnership..-·name | ||
| 0003fd50:· | 0003fd50:·3a20·456e·7375·7265·204c·6f67·2046·696c··:·Ensure·Log·Fil | ||
| Max diff block lines reached; 1118642/1225344 bytes (91.29%) of diff not shown. | |||
| Offset 259, 142 lines modified | Offset 259, 14 lines modified | ||
| 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 269 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 270 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 271 | q·'^installed';·then | ||
| 272 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 273 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 274 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 275 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 276 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 277 | of·IncludeConfig) | ||
| 278 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 279 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 281 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 282 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 283 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 284 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 285 | '%s\\n'·"${INCPATH}";·done) | ||
| 286 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 287 | declare·-a·LOG_FILE_PATHS | ||
| 288 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 289 | RSYSLOG_CONFIGS=() | ||
| 290 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 291 | {RSYSLOG_INCLUDE[@]}") | ||
| 292 | #·Get·full·list·of·files·to·be·checked | ||
| 293 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 294 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 295 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 296 | included·files. | ||
| 297 | RSYSLOG_CONFIG_FILES=() | ||
| 298 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 299 | do | ||
| 300 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 301 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 302 | » if·[·-d·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 305 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 306 | » elif·[·-f·"${ENTRY}"·] | ||
| 307 | » then | ||
| 308 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 309 | » else | ||
| 310 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 311 | » fi | ||
| 312 | done | ||
| 313 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 314 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 315 | configuration) | ||
| 316 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 317 | do | ||
| 318 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 319 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 320 | ('$')·characters, | ||
| 321 | » #·*·Ignore·empty·lines, | ||
| 322 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 323 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 324 | not·log·files | ||
| 325 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 326 | path | ||
| 327 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 328 | all·of·the | ||
| 329 | » #·following·are·met: | ||
| 330 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 331 | » #·*·it·is·preceded·by·space | ||
| 332 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 333 | characters | ||
| 334 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 335 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 336 | » then | ||
| 337 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 338 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 339 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 340 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 341 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 342 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 343 | {FILTERED_PATHS}") | ||
| 344 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 345 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 346 | newline),·split | ||
| 347 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 348 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 349 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 350 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 351 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 352 | » » #·Delete·the·temporary·array | ||
| 353 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 354 | » fi | ||
| 355 | done | ||
| 356 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 357 | grep·regex·is·a·bit | ||
| 358 | #·curly: | ||
| 359 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 360 | #·extract·File="logfile"·expression | ||
| 361 | #·match·only·"logfile"·expression | ||
| 362 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 363 | do | ||
| 364 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 365 | "${LOG_FILE}") | ||
| 366 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 367 | alnum:][:punct:]]*)\"\s*\)") | ||
| 368 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 369 | ]]*)\""|tr·-d·"\"")") | ||
| 370 | done | ||
| 371 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 372 | FILE_CMD="chgrp" | ||
| 373 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 374 | do | ||
| 375 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 376 | further·processing | ||
| 377 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 378 | » then | ||
| Max diff block lines reached; 144452/150103 bytes (96.24%) of diff not shown. | |||
| Offset 16031, 146 lines modified | Offset 16031, 146 lines modified | ||
| 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | ||
| 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ea50:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ea60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ea70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ea80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ea90:·2069·643d·2269·646d·3139·3930·223e·3c74···id="idm1990"><t | |||
| 0003eaa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003eab0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003eac0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ead0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003eae0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003eaf0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003eb00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003eb20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003eb30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003eb40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003eb50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003eb70:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003eb80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003eb90:·653e·3c63·6f64·653e·0a66·6f72·2066·2069··e><code>.for·f·i | |||
| 0003eba0:·6e20·2f65·7463·2f73·7564·6f65·7273·202f··n·/etc/sudoers·/ | |||
| 0003ebb0:·6574·632f·7375·646f·6572·732e·642f·2a20··etc/sudoers.d/*· | |||
| 0003ebc0:·3b20·646f·0a20·2069·6620·5b20·2120·2d65··;·do.··if·[·!·-e | |||
| 0003ebd0:·2022·2466·2220·5d20·3b20·7468·656e·0a20···"$f"·]·;·then.· | |||
| 0003ebe0:·2020·2063·6f6e·7469·6e75·650a·2020·6669·····continue.··fi | |||
| 0003ebf0:·0a20·206d·6174·6368·696e·675f·6c69·7374··.··matching_list | |||
| 0003ec00:·3d24·2867·7265·7020·2d50·2027·5e28·3f21··=$(grep·-P·'^(?! | |||
| 0003ec10:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | |||
| 0003ec20:·6e74·6963·6174·652e·2a24·2720·2466·207c··nticate.*$'·$f·| | |||
| 0003ec30:·2075·6e69·7120·290a·2020·6966·2021·2074···uniq·).··if·!·t | |||
| 0003ec40:·6573·7420·2d7a·2022·246d·6174·6368·696e··est·-z·"$matchin | |||
| 0003ec50:·675f·6c69·7374·223b·2074·6865·6e0a·2020··g_list";·then.·· | |||
| 0003ec60:·2020·7768·696c·6520·4946·533d·2072·6561····while·IFS=·rea | |||
| 0003ec70:·6420·2d72·2065·6e74·7279·3b20·646f·0a20··d·-r·entry;·do.· | |||
| 0003ec80:·2020·2020·2023·2063·6f6d·6d65·6e74·206f·······#·comment·o | |||
| 0003ec90:·7574·2022·2161·7574·6865·6e74·6963·6174··ut·"!authenticat | |||
| 0003eca0:·6522·206d·6174·6368·6573·2074·6f20·7072··e"·matches·to·pr | |||
| 0003ecb0:·6573·6572·7665·2075·7365·7220·6461·7461··eserve·user·data | |||
| 0003ecc0:·0a20·2020·2020·2073·6564·202d·6920·2273··.······sed·-i·"s | |||
| 0003ecd0:·2f5e·247b·656e·7472·797d·242f·2320·2661··/^${entry}$/#·&a | |||
| 0003ece0:·6d70·3b2f·6722·2024·660a·2020·2020·646f··mp;/g"·$f.····do | |||
| 0003ecf0:·6e65·2026·6c74·3b26·6c74·3b26·6c74·3b20··ne·<<<· | |||
| 0003ed00:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ed10:·0a0a·2020·2020·2f75·7372·2f73·6269·6e2f··..····/usr/sbin/ | |||
| 0003ed20:·7669·7375·646f·202d·6366·2024·6620·2661··visudo·-cf·$f·&a | |||
| 0003ed30:·6d70·3b26·6774·3b20·2f64·6576·2f6e·756c··mp;>·/dev/nul | |||
| 0003ed40:·6c20·7c7c·2065·6368·6f20·2246·6169·6c20··l·||·echo·"Fail· | |||
| 0003ed50:·746f·2076·616c·6964·6174·6520·2466·2077··to·validate·$f·w | |||
| 0003ed60:·6974·6820·7669·7375·646f·220a·2020·6669··ith·visudo".··fi | |||
| 0003ed70:·0a64·6f6e·650a·3c2f·636f·6465·3e3c·2f70··.done.</code></p | |||
| 0003ed80:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ed90:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003eda0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003edb0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003edc0:·7461·7267·6574·3d22·2369·646d·3139·3931··target="#idm1991 | |||
| 0003edd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ede0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003edf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ee00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ee10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ee20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e | 0003ea50:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003e | 0003ea60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003e | 0003ea70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003e | 0003ea80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003e | 0003ea90:·7365·2220·6964·3d22·6964·6d31·3939·3022··se"·id="idm1990" | ||
| 0003e | 0003eaa0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003e | 0003eab0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003e | 0003eac0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003e | 0003ead0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003e | 0003eae0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003e | 0003eaf0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003e | 0003eb00:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003e | 0003eb10:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003e | 0003eb20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003e | 0003eb30:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003e | 0003eb40:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003e | 0003eb50:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003e | 0003eb60:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003e | 0003eb70:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003e | 0003eb80:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003e | 0003eb90:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003e | 0003eba0:·653a·2046·696e·6420·2f65·7463·2f73·7564··e:·Find·/etc/sud | ||
| 0003e | 0003ebb0:·6f65·7273·2e64·2f20·6669·6c65·730a·2020··oers.d/·files.·· | ||
| 0003e | 0003ebc0:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | ||
| 0003e | 0003ebd0:·6669·6e64·3a0a·2020·2020·7061·7468·733a··find:.····paths: | ||
| 0003e | 0003ebe0:·0a20·2020·202d·202f·6574·632f·7375·646f··.····-·/etc/sudo | ||
| 0003e | 0003ebf0:·6572·732e·642f·0a20·2072·6567·6973·7465··ers.d/.··registe | ||
| 0003e | 0003ec00:·723a·2073·7564·6f65·7273·0a20·2074·6167··r:·sudoers.··tag | ||
| 0003e | 0003ec10:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | ||
| 0003 | 0003ec20:·3533·2d43·4d2d·3628·6129·0a20·202d·204e··53-CM-6(a).··-·N | ||
| 0003 | 0003ec30:·4953·542d·3830·302d·3533·2d49·412d·3131··IST-800-53-IA-11 | ||
| 0003 | 0003ec40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 0003 | 0003ec50:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | ||
| 0003 | 0003ec60:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 0003 | 0003ec70:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 0003 | 0003ec80:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003 | 0003ec90:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003 | 0003eca0:·6174·6567·790a·2020·2d20·7375·646f·5f72··ategy.··-·sudo_r | ||
| 0003 | 0003ecb0:·656d·6f76·655f·6e6f·5f61·7574·6865·6e74··emove_no_authent | ||
| 0003 | 0003ecc0:·6963·6174·650a·0a2d·206e·616d·653a·2052··icate..-·name:·R | ||
| 0003 | 0003ecd0:·656d·6f76·6520·6c69·6e65·7320·636f·6e74··emove·lines·cont | ||
| 0003 | 0003ece0:·6169·6e69·6e67·2021·6175·7468·656e·7469··aining·!authenti | ||
| 0003 | 0003ecf0:·6361·7465·2066·726f·6d20·7375·646f·6572··cate·from·sudoer | ||
| 0003 | 0003ed00:·7320·6669·6c65·730a·2020·616e·7369·626c··s·files.··ansibl | ||
| 0003 | 0003ed10:·652e·6275·696c·7469·6e2e·7265·706c·6163··e.builtin.replac | ||
| 0003 | 0003ed20:·653a·0a20·2020·2072·6567·6578·703a·2028··e:.····regexp:·( | ||
| 0003 | 0003ed30:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | ||
| 0003 | 0003ed40:·7574·6865·6e74·6963·6174·652e·2a24·290a··uthenticate.*$). | ||
| 0003 | 0003ed50:·2020·2020·7265·706c·6163·653a·2027·2320······replace:·'#· | ||
| 0003 | 0003ed60:·5c67·266c·743b·3126·6774·3b27·0a20·2020··\g<1>'.··· | ||
| 0003 | 0003ed70:·2070·6174·683a·2027·7b7b·2069·7465·6d2e···path:·'{{·item. | ||
| 0003 | 0003ed80:·7061·7468·207d·7d27·0a20·2020·2076·616c··path·}}'.····val | ||
| 0003 | 0003ed90:·6964·6174·653a·202f·7573·722f·7362·696e··idate:·/usr/sbin | ||
| 0003 | 0003eda0:·2f76·6973·7564·6f20·2d63·6620·2573·0a20··/visudo·-cf·%s.· | ||
| 0003 | 0003edb0:·2077·6974·685f·6974·656d·733a·0a20·202d···with_items:.··- | ||
| 0003 | 0003edc0:·2070·6174·683a·202f·6574·632f·7375·646f···path:·/etc/sudo | ||
| 0003 | 0003edd0:·6572·730a·2020·2d20·277b·7b20·7375·646f··ers.··-·'{{·sudo | ||
| 0003 | 0003ede0:·6572·732e·6669·6c65·7320·7d7d·270a·2020··ers.files·}}'.·· | ||
| Max diff block lines reached; 1017432/1036228 bytes (98.19%) of diff not shown. | |||
| Offset 232, 35 lines modified | Offset 232, 14 lines modified | ||
| 232 | ···························1.7,·SR·1.8,·SR·1.9 | 232 | ···························1.7,·SR·1.8,·SR·1.9 |
| 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 238 | ···························SRG-OS-000373-GPOS-00158 | 238 | ···························SRG-OS-000373-GPOS-00158 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 244 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 245 | ··if·[·!·-e·"$f"·]·;·then | ||
| 246 | ····continue | ||
| 247 | ··fi | ||
| 248 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 249 | ··if·!·test·-z·"$matching_list";·then | ||
| 250 | ····while·IFS=·read·-r·entry;·do | ||
| 251 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 252 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 253 | ····done·<<<·"$matching_list" | ||
| 254 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 255 | visudo" | ||
| 256 | ··fi | ||
| 257 | done | ||
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 263 | -·name:·Find·/etc/sudoers.d/·files | 244 | -·name:·Find·/etc/sudoers.d/·files |
| 264 | ··ansible.builtin.find: | 245 | ··ansible.builtin.find: |
| Offset 291, 14 lines modified | Offset 270, 35 lines modified | ||
| 291 | ··-·NIST-800-53-IA-11 | 270 | ··-·NIST-800-53-IA-11 |
| 292 | ··-·low_complexity | 271 | ··-·low_complexity |
| 293 | ··-·low_disruption | 272 | ··-·low_disruption |
| 294 | ··-·medium_severity | 273 | ··-·medium_severity |
| 295 | ··-·no_reboot_needed | 274 | ··-·no_reboot_needed |
| 296 | ··-·restrict_strategy | 275 | ··-·restrict_strategy |
| 297 | ··-·sudo_remove_no_authenticate | 276 | ··-·sudo_remove_no_authenticate |
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 282 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 283 | ··if·[·!·-e·"$f"·]·;·then | ||
| 284 | ····continue | ||
| 285 | ··fi | ||
| 286 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 287 | ··if·!·test·-z·"$matching_list";·then | ||
| 288 | ····while·IFS=·read·-r·entry;·do | ||
| 289 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 290 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 291 | ····done·<<<·"$matching_list" | ||
| 292 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 293 | visudo" | ||
| 294 | ··fi | ||
| 295 | done | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 297 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 298 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 299 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 300 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 301 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 304 | ············Without·re-authentication,·users·may·access·resources·or·perform | 302 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 319, 35 lines modified | Offset 319, 14 lines modified | ||
| 319 | ···························1.7,·SR·1.8,·SR·1.9 | 319 | ···························1.7,·SR·1.8,·SR·1.9 |
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 325 | ···························SRG-OS-000373-GPOS-00158 | 325 | ···························SRG-OS-000373-GPOS-00158 |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 331 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 332 | ··if·[·!·-e·"$f"·]·;·then | ||
| 333 | ····continue | ||
| 334 | ··fi | ||
| 335 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 336 | ··if·!·test·-z·"$matching_list";·then | ||
| 337 | ····while·IFS=·read·-r·entry;·do | ||
| 338 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 339 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 340 | ····done·<<<·"$matching_list" | ||
| 341 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 342 | visudo" | ||
| 343 | ··fi | ||
| 344 | done | ||
| 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 346 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 347 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 348 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 349 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 350 | -·name:·Find·/etc/sudoers.d/·files | 331 | -·name:·Find·/etc/sudoers.d/·files |
| 351 | ··ansible.builtin.find: | 332 | ··ansible.builtin.find: |
| Offset 378, 14 lines modified | Offset 357, 35 lines modified | ||
| 378 | ··-·NIST-800-53-IA-11 | 357 | ··-·NIST-800-53-IA-11 |
| 379 | ··-·low_complexity | 358 | ··-·low_complexity |
| 380 | ··-·low_disruption | 359 | ··-·low_disruption |
| 381 | ··-·medium_severity | 360 | ··-·medium_severity |
| 382 | ··-·no_reboot_needed | 361 | ··-·no_reboot_needed |
| 383 | ··-·restrict_strategy | 362 | ··-·restrict_strategy |
| 384 | ··-·sudo_remove_nopasswd | 363 | ··-·sudo_remove_nopasswd |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 369 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 370 | ··if·[·!·-e·"$f"·]·;·then | ||
| 371 | ····continue | ||
| 372 | ··fi | ||
| 373 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 374 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 119056/124504 bytes (95.62%) of diff not shown. | |||
| Offset 16051, 146 lines modified | Offset 16051, 146 lines modified | ||
| 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | ||
| 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003eb90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003eba0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ebb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ebc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ebd0:·7073·6522·2069·643d·2269·646d·3139·3930··pse"·id="idm1990 | |||
| 0003ebe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ebf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ec00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ec10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ec20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ec30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ec40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ec50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ec60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ec70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ec80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ec90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003eca0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ecb0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ecc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003ecd0:·3e3c·7072·653e·3c63·6f64·653e·0a66·6f72··><pre><code>.for | |||
| 0003ece0:·2066·2069·6e20·2f65·7463·2f73·7564·6f65···f·in·/etc/sudoe | |||
| 0003ecf0:·7273·202f·6574·632f·7375·646f·6572·732e··rs·/etc/sudoers. | |||
| 0003ed00:·642f·2a20·3b20·646f·0a20·2069·6620·5b20··d/*·;·do.··if·[· | |||
| 0003ed10:·2120·2d65·2022·2466·2220·5d20·3b20·7468··!·-e·"$f"·]·;·th | |||
| 0003ed20:·656e·0a20·2020·2063·6f6e·7469·6e75·650a··en.····continue. | |||
| 0003ed30:·2020·6669·0a20·206d·6174·6368·696e·675f····fi.··matching_ | |||
| 0003ed40:·6c69·7374·3d24·2867·7265·7020·2d50·2027··list=$(grep·-P·' | |||
| 0003ed50:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | |||
| 0003ed60:·7574·6865·6e74·6963·6174·652e·2a24·2720··uthenticate.*$'· | |||
| 0003ed70:·2466·207c·2075·6e69·7120·290a·2020·6966··$f·|·uniq·).··if | |||
| 0003ed80:·2021·2074·6573·7420·2d7a·2022·246d·6174···!·test·-z·"$mat | |||
| 0003ed90:·6368·696e·675f·6c69·7374·223b·2074·6865··ching_list";·the | |||
| 0003eda0:·6e0a·2020·2020·7768·696c·6520·4946·533d··n.····while·IFS= | |||
| 0003edb0:·2072·6561·6420·2d72·2065·6e74·7279·3b20···read·-r·entry;· | |||
| 0003edc0:·646f·0a20·2020·2020·2023·2063·6f6d·6d65··do.······#·comme | |||
| 0003edd0:·6e74·206f·7574·2022·2161·7574·6865·6e74··nt·out·"!authent | |||
| 0003ede0:·6963·6174·6522·206d·6174·6368·6573·2074··icate"·matches·t | |||
| 0003edf0:·6f20·7072·6573·6572·7665·2075·7365·7220··o·preserve·user· | |||
| 0003ee00:·6461·7461·0a20·2020·2020·2073·6564·202d··data.······sed·- | |||
| 0003ee10:·6920·2273·2f5e·247b·656e·7472·797d·242f··i·"s/^${entry}$/ | |||
| 0003ee20:·2320·2661·6d70·3b2f·6722·2024·660a·2020··#·&/g"·$f.·· | |||
| 0003ee30:·2020·646f·6e65·2026·6c74·3b26·6c74·3b26····done·<<& | |||
| 0003ee40:·6c74·3b20·2224·6d61·7463·6869·6e67·5f6c··lt;·"$matching_l | |||
| 0003ee50:·6973·7422·0a0a·2020·2020·2f75·7372·2f73··ist"..····/usr/s | |||
| 0003ee60:·6269·6e2f·7669·7375·646f·202d·6366·2024··bin/visudo·-cf·$ | |||
| 0003ee70:·6620·2661·6d70·3b26·6774·3b20·2f64·6576··f·&>·/dev | |||
| 0003ee80:·2f6e·756c·6c20·7c7c·2065·6368·6f20·2246··/null·||·echo·"F | |||
| 0003ee90:·6169·6c20·746f·2076·616c·6964·6174·6520··ail·to·validate· | |||
| 0003eea0:·2466·2077·6974·6820·7669·7375·646f·220a··$f·with·visudo". | |||
| 0003eeb0:·2020·6669·0a64·6f6e·650a·3c2f·636f·6465····fi.done.</code | |||
| 0003eec0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003eed0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003eee0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003eef0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ef00:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ef10:·3139·3931·2220·7461·6269·6e64·6578·3d22··1991"·tabindex=" | |||
| 0003ef20:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ef30:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ef40:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ef50:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ef60:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e | 0003eb90:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003e | 0003eba0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003e | 0003ebb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e | 0003ebc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003e | 0003ebd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 0003e | 0003ebe0:·3939·3022·3e3c·7461·626c·6520·636c·6173··990"><table·clas | ||
| 0003e | 0003ebf0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e | 0003ec00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e | 0003ec10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 0003ec20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 0003ec30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 0003ec40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 0003ec50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 0003ec60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 0003ec70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003ec80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003ec90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003eca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003ecb0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003 | 0003ecc0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003 | 0003ecd0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003 | 0003ece0:·206e·616d·653a·2046·696e·6420·2f65·7463···name:·Find·/etc | ||
| 0003 | 0003ecf0:·2f73·7564·6f65·7273·2e64·2f20·6669·6c65··/sudoers.d/·file | ||
| 0003 | 0003ed00:·730a·2020·616e·7369·626c·652e·6275·696c··s.··ansible.buil | ||
| 0003 | 0003ed10:·7469·6e2e·6669·6e64·3a0a·2020·2020·7061··tin.find:.····pa | ||
| 0003 | 0003ed20:·7468·733a·0a20·2020·202d·202f·6574·632f··ths:.····-·/etc/ | ||
| 0003 | 0003ed30:·7375·646f·6572·732e·642f·0a20·2072·6567··sudoers.d/.··reg | ||
| 0003 | 0003ed40:·6973·7465·723a·2073·7564·6f65·7273·0a20··ister:·sudoers.· | ||
| 0003 | 0003ed50:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | ||
| 0003 | 0003ed60:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| 0003 | 0003ed70:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | ||
| 0003 | 0003ed80:·412d·3131·0a20·202d·206c·6f77·5f63·6f6d··A-11.··-·low_com | ||
| 0003 | 0003ed90:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | ||
| 0003 | 0003eda0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | ||
| 0003 | 0003edb0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | ||
| 0003 | 0003edc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003 | 0003edd0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003 | 0003ede0:·5f73·7472·6174·6567·790a·2020·2d20·7375··_strategy.··-·su | ||
| 0003 | 0003edf0:·646f·5f72·656d·6f76·655f·6e6f·5f61·7574··do_remove_no_aut | ||
| 0003 | 0003ee00:·6865·6e74·6963·6174·650a·0a2d·206e·616d··henticate..-·nam | ||
| 0003 | 0003ee10:·653a·2052·656d·6f76·6520·6c69·6e65·7320··e:·Remove·lines· | ||
| 0003 | 0003ee20:·636f·6e74·6169·6e69·6e67·2021·6175·7468··containing·!auth | ||
| 0003 | 0003ee30:·656e·7469·6361·7465·2066·726f·6d20·7375··enticate·from·su | ||
| 0003 | 0003ee40:·646f·6572·7320·6669·6c65·730a·2020·616e··doers·files.··an | ||
| 0003 | 0003ee50:·7369·626c·652e·6275·696c·7469·6e2e·7265··sible.builtin.re | ||
| 0003 | 0003ee60:·706c·6163·653a·0a20·2020·2072·6567·6578··place:.····regex | ||
| 0003 | 0003ee70:·703a·2028·5e28·3f21·2329·2e2a·5b5c·735d··p:·(^(?!#).*[\s] | ||
| 0003 | 0003ee80:·2b5c·2161·7574·6865·6e74·6963·6174·652e··+\!authenticate. | ||
| 0003 | 0003ee90:·2a24·290a·2020·2020·7265·706c·6163·653a··*$).····replace: | ||
| 0003 | 0003eea0:·2027·2320·5c67·266c·743b·3126·6774·3b27···'#·\g<1>' | ||
| 0003 | 0003eeb0:·0a20·2020·2070·6174·683a·2027·7b7b·2069··.····path:·'{{·i | ||
| 0003 | 0003eec0:·7465·6d2e·7061·7468·207d·7d27·0a20·2020··tem.path·}}'.··· | ||
| 0003 | 0003eed0:·2076·616c·6964·6174·653a·202f·7573·722f···validate:·/usr/ | ||
| 0003 | 0003eee0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | ||
| 0003 | 0003eef0:·2573·0a20·2077·6974·685f·6974·656d·733a··%s.··with_items: | ||
| 0003 | 0003ef00:·0a20·202d·2070·6174·683a·202f·6574·632f··.··-·path:·/etc/ | ||
| 0003 | 0003ef10:·7375·646f·6572·730a·2020·2d20·277b·7b20··sudoers.··-·'{{· | ||
| 0003 | 0003ef20:·7375·646f·6572·732e·6669·6c65·7320·7d7d··sudoers.files·}} | ||
| Max diff block lines reached; 1165922/1184718 bytes (98.41%) of diff not shown. | |||
| Offset 236, 35 lines modified | Offset 236, 14 lines modified | ||
| 236 | ···························1.7,·SR·1.8,·SR·1.9 | 236 | ···························1.7,·SR·1.8,·SR·1.9 |
| 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 242 | ···························SRG-OS-000373-GPOS-00158 | 242 | ···························SRG-OS-000373-GPOS-00158 |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 248 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 249 | ··if·[·!·-e·"$f"·]·;·then | ||
| 250 | ····continue | ||
| 251 | ··fi | ||
| 252 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 253 | ··if·!·test·-z·"$matching_list";·then | ||
| 254 | ····while·IFS=·read·-r·entry;·do | ||
| 255 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 256 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 257 | ····done·<<<·"$matching_list" | ||
| 258 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 259 | visudo" | ||
| 260 | ··fi | ||
| 261 | done | ||
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 267 | -·name:·Find·/etc/sudoers.d/·files | 248 | -·name:·Find·/etc/sudoers.d/·files |
| 268 | ··ansible.builtin.find: | 249 | ··ansible.builtin.find: |
| Offset 295, 14 lines modified | Offset 274, 35 lines modified | ||
| 295 | ··-·NIST-800-53-IA-11 | 274 | ··-·NIST-800-53-IA-11 |
| 296 | ··-·low_complexity | 275 | ··-·low_complexity |
| 297 | ··-·low_disruption | 276 | ··-·low_disruption |
| 298 | ··-·medium_severity | 277 | ··-·medium_severity |
| 299 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 301 | ··-·sudo_remove_no_authenticate | 280 | ··-·sudo_remove_no_authenticate |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 287 | ··if·[·!·-e·"$f"·]·;·then | ||
| 288 | ····continue | ||
| 289 | ··fi | ||
| 290 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 291 | ··if·!·test·-z·"$matching_list";·then | ||
| 292 | ····while·IFS=·read·-r·entry;·do | ||
| 293 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 294 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 295 | ····done·<<<·"$matching_list" | ||
| 296 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 297 | visudo" | ||
| 298 | ··fi | ||
| 299 | done | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 303 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 304 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 305 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 306 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 307 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 308 | ············Without·re-authentication,·users·may·access·resources·or·perform | 306 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 323, 35 lines modified | Offset 323, 14 lines modified | ||
| 323 | ···························1.7,·SR·1.8,·SR·1.9 | 323 | ···························1.7,·SR·1.8,·SR·1.9 |
| 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 329 | ···························SRG-OS-000373-GPOS-00158 | 329 | ···························SRG-OS-000373-GPOS-00158 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 335 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 336 | ··if·[·!·-e·"$f"·]·;·then | ||
| 337 | ····continue | ||
| 338 | ··fi | ||
| 339 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 340 | ··if·!·test·-z·"$matching_list";·then | ||
| 341 | ····while·IFS=·read·-r·entry;·do | ||
| 342 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 343 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 344 | ····done·<<<·"$matching_list" | ||
| 345 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 346 | visudo" | ||
| 347 | ··fi | ||
| 348 | done | ||
| 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 354 | -·name:·Find·/etc/sudoers.d/·files | 335 | -·name:·Find·/etc/sudoers.d/·files |
| 355 | ··ansible.builtin.find: | 336 | ··ansible.builtin.find: |
| Offset 382, 14 lines modified | Offset 361, 35 lines modified | ||
| 382 | ··-·NIST-800-53-IA-11 | 361 | ··-·NIST-800-53-IA-11 |
| 383 | ··-·low_complexity | 362 | ··-·low_complexity |
| 384 | ··-·low_disruption | 363 | ··-·low_disruption |
| 385 | ··-·medium_severity | 364 | ··-·medium_severity |
| 386 | ··-·no_reboot_needed | 365 | ··-·no_reboot_needed |
| 387 | ··-·restrict_strategy | 366 | ··-·restrict_strategy |
| 388 | ··-·sudo_remove_nopasswd | 367 | ··-·sudo_remove_nopasswd |
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 373 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 374 | ··if·[·!·-e·"$f"·]·;·then | ||
| 375 | ····continue | ||
| 376 | ··fi | ||
| 377 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 378 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139135/144583 bytes (96.23%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3939·3022·3e3c·7461·626c·6520··idm1990"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3939·3122·2074·6162··t="#idm1991"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039bd0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039be0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039bf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039c00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039 | 00039c10:·643d·2269·646d·3139·3930·223e·3c74·6162··d="idm1990"><tab | ||
| 0003 | 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003 | 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003 | 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003 | 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003 | 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003 | 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003 | 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003 | 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003 | 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003 | 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003 | 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003 | 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003 | 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003 | 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003 | 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | ||
| 0003 | 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | ||
| 0003 | 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | ||
| 0003 | 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | ||
| 0003 | 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | ||
| 0003 | 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | ||
| 0003 | 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | ||
| 0003 | 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | ||
| 0003 | 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | ||
| 0003 | 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | ||
| 0003 | 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | ||
| 0003 | 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | ||
| 0003 | 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | ||
| 0003 | 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | ||
| 0003 | 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003 | 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003 | 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | ||
| 0003 | 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | ||
| 0003 | 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | ||
| 0003 | 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | ||
| 0003 | 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | ||
| 0003 | 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | ||
| 0003 | 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | ||
| 0003 | 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | ||
| 0003 | 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | ||
| 0003 | 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | ||
| 0003 | 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | ||
| 0003 | 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | ||
| 0003 | 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | ||
| 0003 | 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | ||
| 0003 | 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | ||
| 0003 | 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | ||
| 0003 | 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | ||
| 0003 | 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | ||
| 0003 | 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | ||
| 0003 | 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | ||
| Max diff block lines reached; 274268/293202 bytes (93.54%) of diff not shown. | |||
| Offset 90, 35 lines modified | Offset 90, 14 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Find·/etc/sudoers.d/·files | 102 | -·name:·Find·/etc/sudoers.d/·files |
| 122 | ··ansible.builtin.find: | 103 | ··ansible.builtin.find: |
| Offset 149, 14 lines modified | Offset 128, 35 lines modified | ||
| 149 | ··-·NIST-800-53-IA-11 | 128 | ··-·NIST-800-53-IA-11 |
| 150 | ··-·low_complexity | 129 | ··-·low_complexity |
| 151 | ··-·low_disruption | 130 | ··-·low_disruption |
| 152 | ··-·medium_severity | 131 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 132 | ··-·no_reboot_needed |
| 154 | ··-·restrict_strategy | 133 | ··-·restrict_strategy |
| 155 | ··-·sudo_remove_no_authenticate | 134 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 162 | ············Without·re-authentication,·users·may·access·resources·or·perform | 160 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 35 lines modified | Offset 177, 14 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 208 | -·name:·Find·/etc/sudoers.d/·files | 189 | -·name:·Find·/etc/sudoers.d/·files |
| 209 | ··ansible.builtin.find: | 190 | ··ansible.builtin.find: |
| Offset 236, 14 lines modified | Offset 215, 35 lines modified | ||
| 236 | ··-·NIST-800-53-IA-11 | 215 | ··-·NIST-800-53-IA-11 |
| 237 | ··-·low_complexity | 216 | ··-·low_complexity |
| 238 | ··-·low_disruption | 217 | ··-·low_disruption |
| 239 | ··-·medium_severity | 218 | ··-·medium_severity |
| 240 | ··-·no_reboot_needed | 219 | ··-·no_reboot_needed |
| 241 | ··-·restrict_strategy | 220 | ··-·restrict_strategy |
| 242 | ··-·sudo_remove_nopasswd | 221 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34899/40356 bytes (86.48%) of diff not shown. | |||
| Offset 16042, 146 lines modified | Offset 16042, 146 lines modified | ||
| 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | ||
| 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003eb00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003eb10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003eb20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003eb30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003eb40:·2269·646d·3139·3930·223e·3c74·6162·6c65··"idm1990"><table | |||
| 0003eb50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003eb60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003eb70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003eb80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003eb90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003eba0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ebb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ebc0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ebd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ebe0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ebf0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ec00:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ec10:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003ec20:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ec30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ec40:·6f64·653e·0a66·6f72·2066·2069·6e20·2f65··ode>.for·f·in·/e | |||
| 0003ec50:·7463·2f73·7564·6f65·7273·202f·6574·632f··tc/sudoers·/etc/ | |||
| 0003ec60:·7375·646f·6572·732e·642f·2a20·3b20·646f··sudoers.d/*·;·do | |||
| 0003ec70:·0a20·2069·6620·5b20·2120·2d65·2022·2466··.··if·[·!·-e·"$f | |||
| 0003ec80:·2220·5d20·3b20·7468·656e·0a20·2020·2063··"·]·;·then.····c | |||
| 0003ec90:·6f6e·7469·6e75·650a·2020·6669·0a20·206d··ontinue.··fi.··m | |||
| 0003eca0:·6174·6368·696e·675f·6c69·7374·3d24·2867··atching_list=$(g | |||
| 0003ecb0:·7265·7020·2d50·2027·5e28·3f21·2329·2e2a··rep·-P·'^(?!#).* | |||
| 0003ecc0:·5b5c·735d·2b5c·2161·7574·6865·6e74·6963··[\s]+\!authentic | |||
| 0003ecd0:·6174·652e·2a24·2720·2466·207c·2075·6e69··ate.*$'·$f·|·uni | |||
| 0003ece0:·7120·290a·2020·6966·2021·2074·6573·7420··q·).··if·!·test· | |||
| 0003ecf0:·2d7a·2022·246d·6174·6368·696e·675f·6c69··-z·"$matching_li | |||
| 0003ed00:·7374·223b·2074·6865·6e0a·2020·2020·7768··st";·then.····wh | |||
| 0003ed10:·696c·6520·4946·533d·2072·6561·6420·2d72··ile·IFS=·read·-r | |||
| 0003ed20:·2065·6e74·7279·3b20·646f·0a20·2020·2020···entry;·do.····· | |||
| 0003ed30:·2023·2063·6f6d·6d65·6e74·206f·7574·2022···#·comment·out·" | |||
| 0003ed40:·2161·7574·6865·6e74·6963·6174·6522·206d··!authenticate"·m | |||
| 0003ed50:·6174·6368·6573·2074·6f20·7072·6573·6572··atches·to·preser | |||
| 0003ed60:·7665·2075·7365·7220·6461·7461·0a20·2020··ve·user·data.··· | |||
| 0003ed70:·2020·2073·6564·202d·6920·2273·2f5e·247b·····sed·-i·"s/^${ | |||
| 0003ed80:·656e·7472·797d·242f·2320·2661·6d70·3b2f··entry}$/#·&/ | |||
| 0003ed90:·6722·2024·660a·2020·2020·646f·6e65·2026··g"·$f.····done·& | |||
| 0003eda0:·6c74·3b26·6c74·3b26·6c74·3b20·2224·6d61··lt;<<·"$ma | |||
| 0003edb0:·7463·6869·6e67·5f6c·6973·7422·0a0a·2020··tching_list"..·· | |||
| 0003edc0:·2020·2f75·7372·2f73·6269·6e2f·7669·7375····/usr/sbin/visu | |||
| 0003edd0:·646f·202d·6366·2024·6620·2661·6d70·3b26··do·-cf·$f·&& | |||
| 0003ede0:·6774·3b20·2f64·6576·2f6e·756c·6c20·7c7c··gt;·/dev/null·|| | |||
| 0003edf0:·2065·6368·6f20·2246·6169·6c20·746f·2076···echo·"Fail·to·v | |||
| 0003ee00:·616c·6964·6174·6520·2466·2077·6974·6820··alidate·$f·with· | |||
| 0003ee10:·7669·7375·646f·220a·2020·6669·0a64·6f6e··visudo".··fi.don | |||
| 0003ee20:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003ee30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ee40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ee50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ee60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ee70:·6574·3d22·2369·646d·3139·3931·2220·7461··et="#idm1991"·ta | |||
| 0003ee80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ee90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003eea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003eeb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003eec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003eed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003e | 0003eb00:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003e | 0003eb10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003e | 0003eb20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003e | 0003eb30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003e | 0003eb40:·6964·3d22·6964·6d31·3939·3022·3e3c·7461··id="idm1990"><ta | ||
| 0003e | 0003eb50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003e | 0003eb60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003e | 0003eb70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003e | 0003eb80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003e | 0003eb90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003e | 0003eba0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003e | 0003ebb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003e | 0003ebc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003e | 0003ebd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003e | 0003ebe0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003e | 0003ebf0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003e | 0003ec00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003e | 0003ec10:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003 | 0003ec20:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003 | 0003ec30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003 | 0003ec40:·3e3c·636f·6465·3e2d·206e·616d·653a·2046··><code>-·name:·F | ||
| 0003 | 0003ec50:·696e·6420·2f65·7463·2f73·7564·6f65·7273··ind·/etc/sudoers | ||
| 0003 | 0003ec60:·2e64·2f20·6669·6c65·730a·2020·616e·7369··.d/·files.··ansi | ||
| 0003 | 0003ec70:·626c·652e·6275·696c·7469·6e2e·6669·6e64··ble.builtin.find | ||
| 0003 | 0003ec80:·3a0a·2020·2020·7061·7468·733a·0a20·2020··:.····paths:.··· | ||
| 0003 | 0003ec90:·202d·202f·6574·632f·7375·646f·6572·732e···-·/etc/sudoers. | ||
| 0003 | 0003eca0:·642f·0a20·2072·6567·6973·7465·723a·2073··d/.··register:·s | ||
| 0003 | 0003ecb0:·7564·6f65·7273·0a20·2074·6167·733a·0a20··udoers.··tags:.· | ||
| 0003 | 0003ecc0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003 | 0003ecd0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | ||
| 0003 | 0003ece0:·3830·302d·3533·2d49·412d·3131·0a20·202d··800-53-IA-11.··- | ||
| 0003 | 0003ecf0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | ||
| 0003 | 0003ed00:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | ||
| 0003 | 0003ed10:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | ||
| 0003 | 0003ed20:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | ||
| 0003 | 0003ed30:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003 | 0003ed40:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003 | 0003ed50:·790a·2020·2d20·7375·646f·5f72·656d·6f76··y.··-·sudo_remov | ||
| 0003 | 0003ed60:·655f·6e6f·5f61·7574·6865·6e74·6963·6174··e_no_authenticat | ||
| 0003 | 0003ed70:·650a·0a2d·206e·616d·653a·2052·656d·6f76··e..-·name:·Remov | ||
| 0003 | 0003ed80:·6520·6c69·6e65·7320·636f·6e74·6169·6e69··e·lines·containi | ||
| 0003 | 0003ed90:·6e67·2021·6175·7468·656e·7469·6361·7465··ng·!authenticate | ||
| 0003 | 0003eda0:·2066·726f·6d20·7375·646f·6572·7320·6669···from·sudoers·fi | ||
| 0003 | 0003edb0:·6c65·730a·2020·616e·7369·626c·652e·6275··les.··ansible.bu | ||
| 0003 | 0003edc0:·696c·7469·6e2e·7265·706c·6163·653a·0a20··iltin.replace:.· | ||
| 0003 | 0003edd0:·2020·2072·6567·6578·703a·2028·5e28·3f21·····regexp:·(^(?! | ||
| 0003 | 0003ede0:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | ||
| 0003 | 0003edf0:·6e74·6963·6174·652e·2a24·290a·2020·2020··nticate.*$).···· | ||
| 0003 | 0003ee00:·7265·706c·6163·653a·2027·2320·5c67·266c··replace:·'#·\g&l | ||
| 0003 | 0003ee10:·743b·3126·6774·3b27·0a20·2020·2070·6174··t;1>'.····pat | ||
| 0003 | 0003ee20:·683a·2027·7b7b·2069·7465·6d2e·7061·7468··h:·'{{·item.path | ||
| 0003 | 0003ee30:·207d·7d27·0a20·2020·2076·616c·6964·6174···}}'.····validat | ||
| 0003 | 0003ee40:·653a·202f·7573·722f·7362·696e·2f76·6973··e:·/usr/sbin/vis | ||
| 0003 | 0003ee50:·7564·6f20·2d63·6620·2573·0a20·2077·6974··udo·-cf·%s.··wit | ||
| 0003 | 0003ee60:·685f·6974·656d·733a·0a20·202d·2070·6174··h_items:.··-·pat | ||
| 0003 | 0003ee70:·683a·202f·6574·632f·7375·646f·6572·730a··h:·/etc/sudoers. | ||
| 0003 | 0003ee80:·2020·2d20·277b·7b20·7375·646f·6572·732e····-·'{{·sudoers. | ||
| 0003 | 0003ee90:·6669·6c65·7320·7d7d·270a·2020·7461·6773··files·}}'.··tags | ||
| Max diff block lines reached; 1166155/1184951 bytes (98.41%) of diff not shown. | |||
| Offset 234, 35 lines modified | Offset 234, 14 lines modified | ||
| 234 | ···························1.7,·SR·1.8,·SR·1.9 | 234 | ···························1.7,·SR·1.8,·SR·1.9 |
| 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 240 | ···························SRG-OS-000373-GPOS-00158 | 240 | ···························SRG-OS-000373-GPOS-00158 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 246 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 247 | ··if·[·!·-e·"$f"·]·;·then | ||
| 248 | ····continue | ||
| 249 | ··fi | ||
| 250 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 251 | ··if·!·test·-z·"$matching_list";·then | ||
| 252 | ····while·IFS=·read·-r·entry;·do | ||
| 253 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 254 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 255 | ····done·<<<·"$matching_list" | ||
| 256 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 257 | visudo" | ||
| 258 | ··fi | ||
| 259 | done | ||
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 265 | -·name:·Find·/etc/sudoers.d/·files | 246 | -·name:·Find·/etc/sudoers.d/·files |
| 266 | ··ansible.builtin.find: | 247 | ··ansible.builtin.find: |
| Offset 293, 14 lines modified | Offset 272, 35 lines modified | ||
| 293 | ··-·NIST-800-53-IA-11 | 272 | ··-·NIST-800-53-IA-11 |
| 294 | ··-·low_complexity | 273 | ··-·low_complexity |
| 295 | ··-·low_disruption | 274 | ··-·low_disruption |
| 296 | ··-·medium_severity | 275 | ··-·medium_severity |
| 297 | ··-·no_reboot_needed | 276 | ··-·no_reboot_needed |
| 298 | ··-·restrict_strategy | 277 | ··-·restrict_strategy |
| 299 | ··-·sudo_remove_no_authenticate | 278 | ··-·sudo_remove_no_authenticate |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 285 | ··if·[·!·-e·"$f"·]·;·then | ||
| 286 | ····continue | ||
| 287 | ··fi | ||
| 288 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 289 | ··if·!·test·-z·"$matching_list";·then | ||
| 290 | ····while·IFS=·read·-r·entry;·do | ||
| 291 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 292 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 293 | ····done·<<<·"$matching_list" | ||
| 294 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 295 | visudo" | ||
| 296 | ··fi | ||
| 297 | done | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 306 | ············Without·re-authentication,·users·may·access·resources·or·perform | 304 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 321, 35 lines modified | Offset 321, 14 lines modified | ||
| 321 | ···························1.7,·SR·1.8,·SR·1.9 | 321 | ···························1.7,·SR·1.8,·SR·1.9 |
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 327 | ···························SRG-OS-000373-GPOS-00158 | 327 | ···························SRG-OS-000373-GPOS-00158 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 334 | ··if·[·!·-e·"$f"·]·;·then | ||
| 335 | ····continue | ||
| 336 | ··fi | ||
| 337 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 338 | ··if·!·test·-z·"$matching_list";·then | ||
| 339 | ····while·IFS=·read·-r·entry;·do | ||
| 340 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 341 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 342 | ····done·<<<·"$matching_list" | ||
| 343 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 344 | visudo" | ||
| 345 | ··fi | ||
| 346 | done | ||
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 352 | -·name:·Find·/etc/sudoers.d/·files | 333 | -·name:·Find·/etc/sudoers.d/·files |
| 353 | ··ansible.builtin.find: | 334 | ··ansible.builtin.find: |
| Offset 380, 14 lines modified | Offset 359, 35 lines modified | ||
| 380 | ··-·NIST-800-53-IA-11 | 359 | ··-·NIST-800-53-IA-11 |
| 381 | ··-·low_complexity | 360 | ··-·low_complexity |
| 382 | ··-·low_disruption | 361 | ··-·low_disruption |
| 383 | ··-·medium_severity | 362 | ··-·medium_severity |
| 384 | ··-·no_reboot_needed | 363 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 364 | ··-·restrict_strategy |
| 386 | ··-·sudo_remove_nopasswd | 365 | ··-·sudo_remove_nopasswd |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 372 | ··if·[·!·-e·"$f"·]·;·then | ||
| 373 | ····continue | ||
| 374 | ··fi | ||
| 375 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 376 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139081/144529 bytes (96.23%) of diff not shown. | |||
| Offset 16680, 181 lines modified | Offset 16680, 181 lines modified | ||
| 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | ||
| 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000412e0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000412f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00041300:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00041310:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041320:·2269·646d·3638·3836·223e·3c74·6162·6c65··"idm6886"><table | |||
| 00041330:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041340:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041350:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041360:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041370:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041380:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041390:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000413a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413b0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 000413c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000413d0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000413e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 000413f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041400:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 00041410:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041420:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 00041430:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 00041440:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 00041450:·2070·6c61·7466·6f72·6d73·0a69·6620·6470···platforms.if·dp | |||
| 00041460:·6b67·2d71·7565·7279·202d·2d73·686f·7720··kg-query·--show· | |||
| 00041470:·2d2d·7368·6f77·666f·726d·6174·3d27·247b··--showformat='${ | |||
| 00041480:·6462·3a53·7461·7475·732d·5374·6174·7573··db:Status-Status | |||
| 00041490:·7d0a·2720·276c·696e·7578·2d62·6173·6527··}.'·'linux-base' | |||
| 000414a0:·2032·2667·743b·2f64·6576·2f6e·756c·6c20···2>/dev/null· | |||
| 000414b0:·7c20·6772·6570·202d·7120·5e69·6e73·7461··|·grep·-q·^insta | |||
| 000414c0:·6c6c·6564·3b20·7468·656e·0a0a·6966·204c··lled;·then..if·L | |||
| 000414d0:·435f·414c·4c3d·4320·6772·6570·202d·7120··C_ALL=C·grep·-q· | |||
| 000414e0:·2d6d·2031·2022·5e69·6e73·7461·6c6c·2072··-m·1·"^install·r | |||
| 000414f0:·6473·2220·2f65·7463·2f6d·6f64·7072·6f62··ds"·/etc/modprob | |||
| 00041500:·652e·642f·7264·732e·636f·6e66·203b·2074··e.d/rds.conf·;·t | |||
| 00041510:·6865·6e0a·090a·0973·6564·202d·6920·2773··hen....sed·-i·'s | |||
| 00041 | 000412e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 000412f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041300:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00041310:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00041320:·6964·3d22·6964·6d36·3838·3622·3e3c·7461··id="idm6886"><ta | |||
| 00041330:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00041340:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00041350:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00041360:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00041370:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00041380:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00041390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000413a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000413b0:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 000413c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000413d0:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 000413e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000413f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00041400:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 00041410:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00041420:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 00041430:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 00041440:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00041450:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00041460:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00041470:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041480:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041490:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 000414a0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 000414b0:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 000414c0:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 000414d0:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 000414e0:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000414f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 00041500:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 00041510:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 00041520:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 00041530:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 00041540:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041550:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041560:·2720·6973·2064·6973·6162·6c65·640a·2020··'·is·disabled.·· | |||
| 00041570:·6c69·6e65·696e·6669·6c65·3a0a·2020·2020··lineinfile:.···· | |||
| 00041580:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | |||
| 00041590:·2064·6573·743a·202f·6574·632f·6d6f·6470···dest:·/etc/modp | |||
| 000415a0:·726f·6265·2e64·2f72·6473·2e63·6f6e·660a··robe.d/rds.conf. | |||
| 000415b0:·2020·2020·7265·6765·7870·3a20·696e·7374······regexp:·inst | |||
| 000415c0:·616c·6c5c·732b·7264·730a·2020·2020·6c69··all\s+rds.····li | |||
| 000415 | 000415d0:·6e65·3a20·696e·7374·616c·6c20·7264·7320··ne:·install·rds· | ||
| 000415 | 000415e0:·2f62·696e·2f66·616c·7365·0a20·2077·6865··/bin/false.··whe | ||
| 000415f0:·6e3a·2027·226c·696e·7578·2d62·6173·6522··n:·'"linux-base" | |||
| 00041600:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00041610:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 00041620:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041630:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041640:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 00041650:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 00041660:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 00041670:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 00041680:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 00041690:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000416a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 000416b0:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 000416c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 000416d0:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 000416e0:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 000416f0:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041700:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041710:·2720·6973·2062·6c61·636b·6c69·7374·6564··'·is·blacklisted | |||
| 00041720:·0a20·206c·696e·6569·6e66·696c·653a·0a20··.··lineinfile:.· | |||
| 00041730:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | |||
| 00041740:·2020·2020·6465·7374·3a20·2f65·7463·2f6d······dest:·/etc/m | |||
| 00041 | 00041750:·6f64·7072·6f62·652e·642f·7264·732e·636f··odprobe.d/rds.co | ||
| 00041760:·6e66·0a20·2020·2072·6567·6578·703a·205e··nf.····regexp:·^ | |||
| 00041560:·6e66·0a65·6c73·650a·0965·6368·6f20·2d65··nf.else..echo·-e | |||
| 00041570:·2022·5c6e·2320·4469·7361·626c·6520·7065···"\n#·Disable·pe | |||
| 00041580:·7220·7365·6375·7269·7479·2072·6571·7569··r·security·requi | |||
| 00041590:·7265·6d65·6e74·7322·2026·6774·3b26·6774··rements"·>> | |||
| 000415a0:·3b20·2f65·7463·2f6d·6f64·7072·6f62·652e··;·/etc/modprobe. | |||
| 000415b0:·642f·7264·732e·636f·6e66·0a09·6563·686f··d/rds.conf..echo | |||
| 000415c0:·2022·696e·7374·616c·6c20·7264·7320·2f62···"install·rds·/b | |||
| 000415d0:·696e·2f66·616c·7365·2220·2667·743b·2667··in/false"·>&g | |||
| 000415e0:·743b·202f·6574·632f·6d6f·6470·726f·6265··t;·/etc/modprobe | |||
| 000415f0:·2e64·2f72·6473·2e63·6f6e·660a·6669·0a0a··.d/rds.conf.fi.. | |||
| 00041600:·6966·2021·204c·435f·414c·4c3d·4320·6772··if·!·LC_ALL=C·gr | |||
| Max diff block lines reached; 1771131/1794757 bytes (98.68%) of diff not shown. | |||
| Offset 304, 38 lines modified | Offset 304, 14 lines modified | ||
| 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR | 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR |
| 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR | 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR |
| 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 308 | ···························A.9.1.2 | 308 | ···························A.9.1.2 |
| 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 316 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 317 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 318 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 319 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 320 | » | ||
| 321 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 322 | else | ||
| 323 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 324 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 325 | fi | ||
| 326 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 327 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 337 | -·name:·Gather·the·package·facts | 316 | -·name:·Gather·the·package·facts |
| 338 | ··package_facts: | 317 | ··package_facts: |
| Offset 382, 14 lines modified | Offset 358, 38 lines modified | ||
| 382 | ··-·NIST-800-53-CM-7(b) | 358 | ··-·NIST-800-53-CM-7(b) |
| 383 | ··-·disable_strategy | 359 | ··-·disable_strategy |
| 384 | ··-·kernel_module_rds_disabled | 360 | ··-·kernel_module_rds_disabled |
| 385 | ··-·low_complexity | 361 | ··-·low_complexity |
| 386 | ··-·low_severity | 362 | ··-·low_severity |
| 387 | ··-·medium_disruption | 363 | ··-·medium_disruption |
| 388 | ··-·reboot_required | 364 | ··-·reboot_required |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 372 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 373 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 374 | » | ||
| 375 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 376 | else | ||
| 377 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 378 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 379 | fi | ||
| 380 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 381 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 382 | fi | ||
| 383 | else | ||
| 384 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 385 | fi | ||
| 389 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 390 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide | 387 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide |
| 391 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc | 388 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc |
| 392 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ | 389 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ |
| 393 | tipc.conf: | 390 | tipc.conf: |
| 394 | install·tipc·/bin/false | 391 | install·tipc·/bin/false |
| 395 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for | 392 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for |
| Offset 414, 38 lines modified | Offset 414, 14 lines modified | ||
| 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 416 | ···························A.9.1.2 | 416 | ···························A.9.1.2 |
| 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 | 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 |
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 426 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 427 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 428 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 429 | if·LC_ALL=C·grep·-q·-m·1·"^install·tipc"·/etc/modprobe.d/tipc.conf·;·then | ||
| 430 | » | ||
| 431 | » sed·-i·'s#^install·tipc.*#install·tipc·/bin/false#g'·/etc/modprobe.d/tipc.conf | ||
| 432 | else | ||
| 433 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/tipc.conf | ||
| 434 | » echo·"install·tipc·/bin/false"·>>·/etc/modprobe.d/tipc.conf | ||
| 435 | fi | ||
| 436 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·tipc$"·/etc/modprobe.d/tipc.conf·;·then | ||
| 437 | » echo·"blacklist·tipc"·>>·/etc/modprobe.d/tipc.conf | ||
| 438 | fi | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 447 | -·name:·Gather·the·package·facts | 426 | -·name:·Gather·the·package·facts |
| 448 | ··package_facts: | 427 | ··package_facts: |
| Offset 492, 14 lines modified | Offset 468, 38 lines modified | ||
| 492 | ··-·NIST-800-53-CM-7(b) | 468 | ··-·NIST-800-53-CM-7(b) |
| 493 | ··-·disable_strategy | 469 | ··-·disable_strategy |
| 494 | ··-·kernel_module_tipc_disabled | 470 | ··-·kernel_module_tipc_disabled |
| 495 | ··-·low_complexity | 471 | ··-·low_complexity |
| 496 | ··-·low_severity | 472 | ··-·low_severity |
| 497 | ··-·medium_disruption | 473 | ··-·medium_disruption |
| 498 | ··-·reboot_required | 474 | ··-·reboot_required |
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 218127/224406 bytes (97.20%) of diff not shown. | |||
| Offset 16249, 783 lines modified | Offset 16249, 783 lines modified | ||
| 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | ||
| 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | ||
| 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003f7f0:·6174·696f·6e20· | 0003f7f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003f800:·707 | 0003f800:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003f810:·6976 | 0003f810:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003f820:·6 | 0003f820:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003f830:·65 | 0003f830:·6170·7365·2220·6964·3d22·6964·6d35·3139··apse"·id="idm519 | ||
| 0003f840:·3 | 0003f840:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | ||
| 0003f850:· | 0003f850:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003f860:·69 | 0003f860:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003f870:·65 | 0003f870:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003f880:· | 0003f880:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003f890:· | 0003f890:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003f8a0:· | 0003f8a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003f8b0:· | 0003f8b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003f8c0:· | 0003f8c0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003f8d0:· | 0003f8d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003f8e0:· | 0003f8e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003f8f0:· | 0003f8f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003f900:· | 0003f900:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003f910:·7 | 0003f910:·793a·3c2f·7468·3e3c·7464·3e63·6f6e·6669··y:</th><td>confi | ||
| 0003f920:· | 0003f920:·6775·7265·3c2f·7464·3e3c·2f74·723e·3c2f··gure</td></tr></ | ||
| 0003f930:·7 | 0003f930:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003f940:· | 0003f940:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003f950:· | 0003f950:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003f960:· | 0003f960:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003f970:· | 0003f970:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003f980:·6 | 0003f980:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003f990:·20 | 0003f990:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | ||
| 0003f9a0:· | 0003f9a0:·3628·3129·0a20·202d·204e·4953·542d·3830··6(1).··-·NIST-80 | ||
| 0003f9b0:· | 0003f9b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | ||
| 0003f9c0:· | 0003f9c0:·2050·4349·2d44·5353·2d52·6571·2d31·302e···PCI-DSS-Req-10. | ||
| 0003f9d0:·2 | 0003f9d0:·352e·310a·2020·2d20·5043·492d·4453·532d··5.1.··-·PCI-DSS- | ||
| 0003f9e0:· | 0003f9e0:·5265·712d·3130·2e35·2e32·0a20·202d·2050··Req-10.5.2.··-·P | ||
| 0003f9f0:·43 | 0003f9f0:·4349·2d44·5353·7634·2d31·302e·330a·2020··CI-DSSv4-10.3.·· | ||
| 0003fa00:· | 0003fa00:·2d20·5043·492d·4453·5376·342d·3130·2e33··-·PCI-DSSv4-10.3 | ||
| 0003fa10:·2 | 0003fa10:·2e32·0a20·202d·2063·6f6e·6669·6775·7265··.2.··-·configure | ||
| 0003fa20:· | 0003fa20:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003fa30:·7 | 0003fa30:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 0003fa40:· | 0003fa40:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003fa50:·6 | 0003fa50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | ||
| 0003fa60:· | 0003fa60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | ||
| 0003fa70:·6 | 0003fa70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003fa80:·72 | 0003fa80:·7273·7973·6c6f·675f·6669·6c65·735f·6772··rsyslog_files_gr | ||
| 0003fa90:· | 0003fa90:·6f75·706f·776e·6572·7368·6970·0a0a·2d20··oupownership..-· | ||
| 0003faa0:·6 | 0003faa0:·6e61·6d65·3a20·456e·7375·7265·204c·6f67··name:·Ensure·Log | ||
| 0003fab0:· | 0003fab0:·2046·696c·6573·2041·7265·204f·776e·6564···Files·Are·Owned | ||
| 0003fac0:· | 0003fac0:·2042·7920·4170·7072·6f70·7269·6174·6520···By·Appropriate· | ||
| 0003fad0:·4 | 0003fad0:·4772·6f75·7020·2d20·5365·7420·7273·7973··Group·-·Set·rsys | ||
| 0003fae0:· | 0003fae0:·6c6f·6720·6c6f·6766·696c·6520·636f·6e66··log·logfile·conf | ||
| 0003faf0:·6 | 0003faf0:·6967·7572·6174·696f·6e0a·2020·2020·6661··iguration.····fa | ||
| 0003fb00:· | 0003fb00:·6374·730a·2020·616e·7369·626c·652e·6275··cts.··ansible.bu | ||
| 0003fb10:· | 0003fb10:·696c·7469·6e2e·7365·745f·6661·6374·3a0a··iltin.set_fact:. | ||
| 0003fb20:· | 0003fb20:·2020·2020·7273·7973·6c6f·675f·6574·635f······rsyslog_etc_ | ||
| 0003fb30:· | 0003fb30:·636f·6e66·6967·3a20·2f65·7463·2f72·7379··config:·/etc/rsy | ||
| 0003fb40:·7 | 0003fb40:·736c·6f67·2e63·6f6e·660a·2020·7768·656e··slog.conf.··when | ||
| 0003fb50:· | 0003fb50:·3a0a·2020·2d20·2722·6c69·6e75·782d·6261··:.··-·'"linux-ba | ||
| 0003fb60:· | 0003fb60:·7365·2220·696e·2061·6e73·6962·6c65·5f66··se"·in·ansible_f | ||
| 0003fb70:· | 0003fb70:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 0003fb80:· | 0003fb80:·202d·2027·2272·7379·736c·6f67·2220·696e···-·'"rsyslog"·in | ||
| 0003fb90:· | 0003fb90:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003fba0:· | 0003fba0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | ||
| 0003fbb0:·0a | 0003fbb0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003fbc0:· | 0003fbc0:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | ||
| 0003fbd0:· | 0003fbd0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | ||
| 0003fbe0:· | 0003fbe0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003fbf0:· | 0003fbf0:·2d31·302e·352e·310a·2020·2d20·5043·492d··-10.5.1.··-·PCI- | ||
| 0003fc00:· | 0003fc00:·4453·532d·5265·712d·3130·2e35·2e32·0a20··DSS-Req-10.5.2.· | ||
| 0003fc10:· | 0003fc10:·202d·2050·4349·2d44·5353·7634·2d31·302e···-·PCI-DSSv4-10. | ||
| 0003fc20:· | 0003fc20:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | ||
| 0003fc30:· | 0003fc30:·3130·2e33·2e32·0a20·202d·2063·6f6e·6669··10.3.2.··-·confi | ||
| 0003fc40:· | 0003fc40:·6775·7265·5f73·7472·6174·6567·790a·2020··gure_strategy.·· | ||
| 0003fc50:· | 0003fc50:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0003fc60:· | 0003fc60:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003fc70:· | 0003fc70:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 0003fc80:· | 0003fc80:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 0003fc90:· | 0003fc90:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003fca0:· | 0003fca0:·2020·2d20·7273·7973·6c6f·675f·6669·6c65····-·rsyslog_file | ||
| 0003fcb0:· | 0003fcb0:·735f·6772·6f75·706f·776e·6572·7368·6970··s_groupownership | ||
| 0003fcc0:· | 0003fcc0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 0003fcd0:· | 0003fcd0:·204c·6f67·2046·696c·6573·2041·7265·204f···Log·Files·Are·O | ||
| 0003fce0:· | 0003fce0:·776e·6564·2042·7920·4170·7072·6f70·7269··wned·By·Appropri | ||
| 0003fcf0:·6 | 0003fcf0:·6174·6520·4772·6f75·7020·2d20·4765·7420··ate·Group·-·Get· | ||
| 0003fd00:· | 0003fd00:·496e·636c·7564·6543·6f6e·6669·6720·6469··IncludeConfig·di | ||
| 0003fd10:· | 0003fd10:·7265·6374·6976·650a·2020·616e·7369·626c··rective.··ansibl | ||
| 0003fd20:·6 | 0003fd20:·652e·6275·696c·7469·6e2e·7368·656c·6c3a··e.builtin.shell: | ||
| 0003fd30:· | 0003fd30:·207c·0a20·2020·2073·6574·202d·6f20·7069···|.····set·-o·pi | ||
| 0003fd40:· | 0003fd40:·7065·6661·696c·0a20·2020·2067·7265·7020··pefail.····grep· | ||
| 0003fd50:·2 | 0003fd50:·2d65·2027·2449·6e63·6c75·6465·436f·6e66··-e·'$IncludeConf | ||
| 0003fd60:· | 0003fd60:·6967·2720·7b7b·2072·7379·736c·6f67·5f65··ig'·{{·rsyslog_e | ||
| 0003fd70:·435f | 0003fd70:·7463·5f63·6f6e·6669·6720·7d7d·207c·2063··tc_config·}}·|·c | ||
| 0003fd80:· | 0003fd80:·7574·202d·6420·2720·2720·2d66·2032·207c··ut·-d·'·'·-f·2·| | ||
| 0003fd90:· | 0003fd90:·7c20·7472·7565·0a20·2072·6567·6973·7465··|·true.··registe | ||
| 0003fda0:· | 0003fda0:·723a·2072·7379·736c·6f67·5f6f·6c64·5f69··r:·rsyslog_old_i | ||
| 0003fdb0:· | 0003fdb0:·6e63·0a20·2063·6861·6e67·6564·5f77·6865··nc.··changed_whe | ||
| 0003fdc0:·6 | 0003fdc0:·6e3a·2066·616c·7365·0a20·2077·6865·6e3a··n:·false.··when: | ||
| 0003fdd0:· | 0003fdd0:·0a20·202d·2027·226c·696e·7578·2d62·6173··.··-·'"linux-bas | ||
| 0003fde0:· | 0003fde0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | ||
| 0003fdf0:· | 0003fdf0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | ||
| 0003fe00:· | 0003fe00:·2d20·2722·7273·7973·6c6f·6722·2069·6e20··-·'"rsyslog"·in· | ||
| 0003fe10:· | 0003fe10:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003fe20:·6 | 0003fe20:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | ||
| 0003fe30:· | 0003fe30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003fe40:· | 0003fe40:·4143·2d36·2831·290a·2020·2d20·4e49·5354··AC-6(1).··-·NIST | ||
| 0003fe50:· | 0003fe50:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| 0003fe60:· | 0003fe60:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003fe70:· | 0003fe70:·3130·2e35·2e31·0a20·202d·2050·4349·2d44··10.5.1.··-·PCI-D | ||
| 0003fe80:· | 0003fe80:·5353·2d52·6571·2d31·302e·352e·320a·2020··SS-Req-10.5.2.·· | ||
| 0003fe90:· | 0003fe90:·2d20·5043·492d·4453·5376·342d·3130·2e33··-·PCI-DSSv4-10.3 | ||
| 0003fea0:· | 0003fea0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003feb0:· | 0003feb0:·302e·332e·320a·2020·2d20·636f·6e66·6967··0.3.2.··-·config | ||
| 0003fec0:· | 0003fec0:·7572·655f·7374·7261·7465·6779·0a20·202d··ure_strategy.··- | ||
| 0003fed0:·2 | 0003fed0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | ||
| 0003fee0:· | 0003fee0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003fef0:· | 0003fef0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | ||
| 0003ff00:· | 0003ff00:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | ||
| 0003ff10:· | 0003ff10:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003ff20:·77 | 0003ff20:·202d·2072·7379·736c·6f67·5f66·696c·6573···-·rsyslog_files | ||
| 0003ff30:· | 0003ff30:·5f67·726f·7570·6f77·6e65·7273·6869·700a··_groupownership. | ||
| 0003ff40:· | 0003ff40:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 0003ff50:· | 0003ff50:·4c6f·6720·4669·6c65·7320·4172·6520·4f77··Log·Files·Are·Ow | ||
| Max diff block lines reached; 1119789/1226491 bytes (91.30%) of diff not shown. | |||
| Offset 264, 142 lines modified | Offset 264, 14 lines modified | ||
| 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 272 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 273 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 274 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 275 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 276 | q·'^installed';·then | ||
| 277 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 278 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 279 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 280 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 281 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 282 | of·IncludeConfig) | ||
| 283 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 284 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 285 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 286 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 287 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 288 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 289 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 290 | '%s\\n'·"${INCPATH}";·done) | ||
| 291 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 292 | declare·-a·LOG_FILE_PATHS | ||
| 293 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 294 | RSYSLOG_CONFIGS=() | ||
| 295 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 296 | {RSYSLOG_INCLUDE[@]}") | ||
| 297 | #·Get·full·list·of·files·to·be·checked | ||
| 298 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 299 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 300 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 301 | included·files. | ||
| 302 | RSYSLOG_CONFIG_FILES=() | ||
| 303 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 304 | do | ||
| 305 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 306 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 307 | » if·[·-d·"${ENTRY}"·] | ||
| 308 | » then | ||
| 309 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 310 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 311 | » elif·[·-f·"${ENTRY}"·] | ||
| 312 | » then | ||
| 313 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 314 | » else | ||
| 315 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 316 | » fi | ||
| 317 | done | ||
| 318 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 319 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 320 | configuration) | ||
| 321 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 322 | do | ||
| 323 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 324 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 325 | ('$')·characters, | ||
| 326 | » #·*·Ignore·empty·lines, | ||
| 327 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 328 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 329 | not·log·files | ||
| 330 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 331 | path | ||
| 332 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 333 | all·of·the | ||
| 334 | » #·following·are·met: | ||
| 335 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 336 | » #·*·it·is·preceded·by·space | ||
| 337 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 338 | characters | ||
| 339 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 340 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 341 | » then | ||
| 342 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 343 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 344 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 345 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 346 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 347 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 348 | {FILTERED_PATHS}") | ||
| 349 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 350 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 351 | newline),·split | ||
| 352 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 353 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 354 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 355 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 356 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 357 | » » #·Delete·the·temporary·array | ||
| 358 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 359 | » fi | ||
| 360 | done | ||
| 361 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 362 | grep·regex·is·a·bit | ||
| 363 | #·curly: | ||
| 364 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 365 | #·extract·File="logfile"·expression | ||
| 366 | #·match·only·"logfile"·expression | ||
| 367 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 368 | do | ||
| 369 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 370 | "${LOG_FILE}") | ||
| 371 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 372 | alnum:][:punct:]]*)\"\s*\)") | ||
| 373 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 374 | ]]*)\""|tr·-d·"\"")") | ||
| 375 | done | ||
| 376 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 377 | FILE_CMD="chgrp" | ||
| 378 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 379 | do | ||
| 380 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 381 | further·processing | ||
| 382 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 383 | » then | ||
| Max diff block lines reached; 144451/150102 bytes (96.24%) of diff not shown. | |||
| Offset 15095, 188 lines modified | Offset 15095, 188 lines modified | ||
| 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | ||
| 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afd0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afe0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aff0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b000:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b010:·2069·643d·2269·646d·3237·3633·223e·3c74···id="idm2763"><t | |||
| 0003b020:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b030:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b040:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b050:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b060:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b070:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b080:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b090:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003afd0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003afe0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003aff0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b000:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b010:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b020:·646d·3237·3633·223e·3c70·7265·3e3c·636f··dm2763"><pre><co | |||
| 0003b030:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b040:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b050:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b060:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b070:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b080:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b090:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b0a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b0b0:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | |||
| 0003b0c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b100:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b110:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b120:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b130:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b140:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b150:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b160:·6d32·3736·3422·3e3c·7461·626c·6520·636c··m2764"><table·cl | |||
| 0003b170:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b180:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b190:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b1a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b1b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b0a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b1d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b0b0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b0c0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b0d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b200:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b210:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b220:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b230:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b240:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b250:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b260:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b270:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b280:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b290:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b2a0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b | 0003b0e0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b0f0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b100:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b110:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b120:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b130:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b140:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b150:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b160:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b170:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b180:·472d·5542·5455·2d32·302d·3031·3034·3530··G-UBTU-20-010450 | |||
| 0003b190:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b1a0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b1b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b1c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b1d0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b1e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b1f0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b200:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b210:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b220:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b230:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b240:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b250:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b260:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b270:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b280:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b290:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b2a0:·2020·7768·656e·3a20·2722·6c69·6e75·782d····when:·'"linux- | |||
| 0003b2b0:·6261·7365·2220·696e·2061·6e73·6962·6c65··base"·in·ansible | |||
| 0003b2c0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b2d0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b2e0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b2f0:·4953·412d·5354·4947·2d55·4254·552d·3230··ISA-STIG-UBTU-20 | |||
| 0003b300:·2d30·3130·3435·300a·2020·2d20·4e49·5354··-010450.··-·NIST | |||
| 0003b310:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b320:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b330:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b340:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b350:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b360:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b370:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b380:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b390:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b3a0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b3b0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b3c0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b3d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b3e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b3f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b400:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b410:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b420:·3634·2220·7461·6269·6e64·6578·3d22·3022··64"·tabindex="0" | |||
| 0003b430:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b440:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b450:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b460:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b470:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b480:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b490:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| Max diff block lines reached; 6645609/6670201 bytes (99.63%) of diff not shown. | |||
| Offset 121, 45 lines modified | Offset 121, 14 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 150 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 151 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 134 | ··package_facts: |
| Offset 190, 14 lines modified | Offset 159, 45 lines modified | ||
| 190 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 191 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 192 | ··-·low_complexity | 161 | ··-·low_complexity |
| 193 | ··-·low_disruption | 162 | ··-·low_disruption |
| 194 | ··-·medium_severity | 163 | ··-·medium_severity |
| 195 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 196 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 177 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 178 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | include·install_aide | ||
| 188 | class·install_aide·{ | ||
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·aideinit | 195 | $·sudo·aideinit |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 202 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 198 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 203 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 41 lines modified | Offset 224, 14 lines modified | ||
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 227 | ············_\x8c_\x8i_\x8s············1.4.1 | 227 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 234 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 235 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 236 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 237 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 238 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 241 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 242 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 245 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 246 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | /usr/sbin/aideinit·-y·-f | ||
| 249 | else | ||
| 250 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 251 | fi | ||
| 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 901108/906173 bytes (99.44%) of diff not shown. | |||
| Offset 15090, 189 lines modified | Offset 15090, 189 lines modified | ||
| 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | ||
| 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003af80:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003af80:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003af90:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003afa0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003afb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003afc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003afd0:·3d22·6964·6d32·3736·3322·3e3c·7461·626c··="idm2763"><tabl | |||
| 0003afe0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aff0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b000:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b010:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b020:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b030:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b040:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b050:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003afa0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003afb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003afc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003afd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003afe0:·3736·3322·3e3c·7072·653e·3c63·6f64·653e··763"><pre><code> | |||
| 0003aff0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b000:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b010:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b020:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b030:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b040:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b050:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b060:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b070:·3237·3634·2220·7461·6269·6e64·6578·3d22··2764"·tabindex=" | |||
| 0003b080:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b090:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b0b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b0c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b0d0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b0e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b100:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b110:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b120:·3634·223e·3c74·6162·6c65·2063·6c61·7373··64"><table·class | |||
| 0003b130:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b140:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b150:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b160:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b170:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b060:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b190:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b070:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b080:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b090:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b0a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b1d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b1f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b200:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b0b0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b0c0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b0d0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b0e0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b0f0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b100:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b110:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b120:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b130:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b140:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b150:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b160:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b170:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b180:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b190:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b1a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b1b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b1c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b1d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b1e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b1f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b200:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b210:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b220:· | 0003b220:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | ||
| 0003b230:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b240:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b250:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b260:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b2 | 0003b230:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | ||
| 0003b240:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b250:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b260:·6865·6e3a·2027·226c·696e·7578·2d62·6173··hen:·'"linux-bas | |||
| 0003b270:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003b280:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b290:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b2a0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b2b0:·2d53·5449·472d·5542·5455·2d32·302d·3031··-STIG-UBTU-20-01 | |||
| 0003b2c0:·3034·3530·0a20·202d·204e·4953·542d·3830··0450.··-·NIST-80 | |||
| 0003b2d0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b2e0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b2f0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b300:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b310:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b320:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b330:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b340:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b350:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b360:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b370:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b380:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b390:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b3c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b3d0:·6172·6765·743d·2223·6964·6d32·3736·3422··arget="#idm2764" | |||
| 0003b3e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b3f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b400:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b410:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b420:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b430:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b440:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b450:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b460:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b470:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 6480693/6505423 bytes (99.62%) of diff not shown. | |||
| Offset 120, 45 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 149 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 150 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 160 | ··package_facts: | 133 | ··package_facts: |
| Offset 189, 14 lines modified | Offset 158, 45 lines modified | ||
| 189 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 190 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 191 | ··-·low_complexity | 160 | ··-·low_complexity |
| 192 | ··-·low_disruption | 161 | ··-·low_disruption |
| 193 | ··-·medium_severity | 162 | ··-·medium_severity |
| 194 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 195 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 176 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 177 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 178 | else | ||
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 180 | fi | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | include·install_aide | ||
| 187 | class·install_aide·{ | ||
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·aideinit | 194 | $·sudo·aideinit |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 201 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 197 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 202 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 223, 41 lines modified | Offset 223, 14 lines modified | ||
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 226 | ············_\x8c_\x8i_\x8s············1.4.1 | 226 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 233 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 234 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 235 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 236 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 237 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 238 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 239 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 240 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 241 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 244 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 245 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 246 | fi | ||
| 247 | /usr/sbin/aideinit·-y·-f | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 883410/888475 bytes (99.43%) of diff not shown. | |||
| Offset 15117, 188 lines modified | Offset 15117, 188 lines modified | ||
| 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | ||
| 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b130:·6d65·6469·6174·696f·6e20·4 | 0003b130:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b140:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b150:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b160:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b170:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b180:·6d32·3736·3322·3e3c·7461·626c·6520·636c··m2763"><table·cl | |||
| 0003b190:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b1a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b1c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b1d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b1e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b1f0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b140:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b150:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b160:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b170:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b180:·7365·2220·6964·3d22·6964·6d32·3736·3322··se"·id="idm2763" | |||
| 0003b190:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b1a0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b1b0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b1c0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b200:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b210:·7461·7267·6574·3d22·2369·646d·3237·3634··target="#idm2764 | |||
| 0003b220:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b230:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b240:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b250:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b260:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b270:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b280:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b290:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b2a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2c0:·6522·2069·643d·2269·646d·3237·3634·223e··e"·id="idm2764"> | |||
| 0003b2d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b300:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b310:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b200:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b210:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b340:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b350:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003b220:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b230:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b240:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b250:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b380:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b390:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b3a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b3b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b3c0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b3d0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b3e0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b3f0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b400:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b410:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003b260:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b270:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b280:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b290:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b2a0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b2b0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b2c0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b2d0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b2e0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b2f0:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b300:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b310:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b320:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b330:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b340:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b350:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b360:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b370:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b380:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b390:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b3a0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b3b0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b3c0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b3d0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b3e0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b3f0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b400:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b410:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b420:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b430:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b440:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b450:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b460:·472d·5542·5455·2d32·302d·3031·3034·3530··G-UBTU-20-010450 | |||
| 0003b470:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b480:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b490:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b4a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b4b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b4c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b4d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b4e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b500:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b510:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b520:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b530:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b540:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b550:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b560:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b570:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b580:·743d·2223·6964·6d32·3736·3422·2074·6162··t="#idm2764"·tab | |||
| 0003b590:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b5a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b5b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b5c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b5d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b5e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b5f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 19757559/19782151 bytes (99.88%) of diff not shown. | |||
| Offset 15113, 188 lines modified | Offset 15113, 188 lines modified | ||
| 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b100:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b110:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b120:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b130:·6170·7365·2220·6964·3d22·6964·6d32·3736··apse"·id="idm276 | |||
| 0003b140:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b150:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b160:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b170:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b180:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b190:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b0f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b100:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b110:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b120:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b130:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b140:·6964·3d22·6964·6d32·3736·3322·3e3c·7072··id="idm2763"><pr | |||
| 0003b150:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b160:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b170:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b180:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b190:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1d0:·6574·3d22·2369·646d·3237·3634·2220·7461··et="#idm2764"·ta | |||
| 0003b1e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b200:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b210:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b220:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b230:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b240:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b250:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b260:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b270:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b280:·643d·2269·646d·3237·3634·223e·3c74·6162··d="idm2764"><tab | |||
| 0003b290:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b1c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b2f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b300:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b310:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b320:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b330:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b1d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b350:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b360:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b370:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b380:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b390:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b3a0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b3b0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b3c0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b | 0003b1e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b1f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b200:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b210:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b220:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b230:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b240:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b250:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b260:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b270:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b280:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b290:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b2a0:·412d·5354·4947·2d55·4254·552d·3230·2d30··A-STIG-UBTU-20-0 | |||
| 0003b2b0:·3130·3435·300a·2020·2d20·4e49·5354·2d38··10450.··-·NIST-8 | |||
| 0003b2c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b2d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b2e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b2f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b300:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b310:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b320:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b330:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b340:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b350:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b360:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b370:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b380:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b390:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b3a0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b3b0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b3c0:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b3d0:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b3e0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b3f0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b400:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b410:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b420:·5455·2d32·302d·3031·3034·3530·0a20·202d··TU-20-010450.··- | |||
| 0003b430:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b440:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b450:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b460:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b470:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b480:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b490:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b4a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b4b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b4c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b4d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b500:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b510:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b520:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b540:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | |||
| 0003b550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b5a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| Max diff block lines reached; 19714175/19738767 bytes (99.88%) of diff not shown. | |||
| Offset 16554, 783 lines modified | Offset 16554, 783 lines modified | ||
| 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | ||
| 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00040b00:·6469·6174·696f·6e20· | 00040b00:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00040b10:·7 | 00040b10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00040b20:·3c64 | 00040b20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 00040b30:·6 | 00040b30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 00040b40:·7073 | 00040b40:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 00040b50:·3 | 00040b50:·3130·3237·223e·3c74·6162·6c65·2063·6c61··1027"><table·cla | ||
| 00040b60:· | 00040b60:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 00040b70:·7 | 00040b70:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 00040b80:· | 00040b80:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 00040b90:· | 00040b90:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 00040ba0:· | 00040ba0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 00040bb0:· | 00040bb0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 00040bc0:· | 00040bc0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 00040bd0:·6 | 00040bd0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 00040be0:·6 | 00040be0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 00040bf0:· | 00040bf0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 00040c00:· | 00040c00:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 00040c10:· | 00040c10:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 00040c20:·7 | 00040c20:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | ||
| 00040c30:·6 | 00040c30:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | ||
| 00040c40:· | 00040c40:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 00040c50:·6465· | 00040c50:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 00040c60:· | 00040c60:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 00040c70:· | 00040c70:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 00040c80:· | 00040c80:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 00040c90:·7 | 00040c90:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 00040ca0:· | 00040ca0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 00040cb0:· | 00040cb0:·4143·2d36·2831·290a·2020·2d20·4e49·5354··AC-6(1).··-·NIST | ||
| 00040cc0:· | 00040cc0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| 00040cd0:· | 00040cd0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 00040ce0:· | 00040ce0:·3130·2e35·2e31·0a20·202d·2050·4349·2d44··10.5.1.··-·PCI-D | ||
| 00040cf0:· | 00040cf0:·5353·2d52·6571·2d31·302e·352e·320a·2020··SS-Req-10.5.2.·· | ||
| 00040d00:· | 00040d00:·2d20·5043·492d·4453·5376·342d·3130·2e33··-·PCI-DSSv4-10.3 | ||
| 00040d10:· | 00040d10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 00040d20:· | 00040d20:·302e·332e·320a·2020·2d20·636f·6e66·6967··0.3.2.··-·config | ||
| 00040d30:· | 00040d30:·7572·655f·7374·7261·7465·6779·0a20·202d··ure_strategy.··- | ||
| 00040d40:· | 00040d40:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | ||
| 00040d50:· | 00040d50:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 00040d60:· | 00040d60:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | ||
| 00040d70:· | 00040d70:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | ||
| 00040d80:· | 00040d80:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 00040d90:·20 | 00040d90:·202d·2072·7379·736c·6f67·5f66·696c·6573···-·rsyslog_files | ||
| 00040da0:· | 00040da0:·5f67·726f·7570·6f77·6e65·7273·6869·700a··_groupownership. | ||
| 00040db0:· | 00040db0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 00040dc0:·6620·4 | 00040dc0:·4c6f·6720·4669·6c65·7320·4172·6520·4f77··Log·Files·Are·Ow | ||
| 00040dd0:· | 00040dd0:·6e65·6420·4279·2041·7070·726f·7072·6961··ned·By·Appropria | ||
| 00040de0:· | 00040de0:·7465·2047·726f·7570·202d·2053·6574·2072··te·Group·-·Set·r | ||
| 00040df0:· | 00040df0:·7379·736c·6f67·206c·6f67·6669·6c65·2063··syslog·logfile·c | ||
| 00040e00:·6 | 00040e00:·6f6e·6669·6775·7261·7469·6f6e·0a20·2020··onfiguration.··· | ||
| 00040e10:· | 00040e10:·2066·6163·7473·0a20·2061·6e73·6962·6c65···facts.··ansible | ||
| 00040e20:· | 00040e20:·2e62·7569·6c74·696e·2e73·6574·5f66·6163··.builtin.set_fac | ||
| 00040e30:· | 00040e30:·743a·0a20·2020·2072·7379·736c·6f67·5f65··t:.····rsyslog_e | ||
| 00040e40:· | 00040e40:·7463·5f63·6f6e·6669·673a·202f·6574·632f··tc_config:·/etc/ | ||
| 00040e50:·727 | 00040e50:·7273·7973·6c6f·672e·636f·6e66·0a20·2077··rsyslog.conf.··w | ||
| 00040e60:· | 00040e60:·6865·6e3a·0a20·202d·2027·226c·696e·7578··hen:.··-·'"linux | ||
| 00040e70:· | 00040e70:·2d62·6173·6522·2069·6e20·616e·7369·626c··-base"·in·ansibl | ||
| 00040e80:· | 00040e80:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 00040e90:· | 00040e90:·270a·2020·2d20·2722·7273·7973·6c6f·6722··'.··-·'"rsyslog" | ||
| 00040ea0:·20 | 00040ea0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 00040eb0:· | 00040eb0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | ||
| 00040ec0:·6 | 00040ec0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | ||
| 00040ed0:·2 | 00040ed0:·2d35·332d·4143·2d36·2831·290a·2020·2d20··-53-AC-6(1).··-· | ||
| 00040ee0:· | 00040ee0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 00040ef0:· | 00040ef0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | ||
| 00040f00:· | 00040f00:·5265·712d·3130·2e35·2e31·0a20·202d·2050··Req-10.5.1.··-·P | ||
| 00040f10:· | 00040f10:·4349·2d44·5353·2d52·6571·2d31·302e·352e··CI-DSS-Req-10.5. | ||
| 00040f20:·2a | 00040f20:·320a·2020·2d20·5043·492d·4453·5376·342d··2.··-·PCI-DSSv4- | ||
| 00040f30:· | 00040f30:·3130·2e33·0a20·202d·2050·4349·2d44·5353··10.3.··-·PCI-DSS | ||
| 00040f40:·7 | 00040f40:·7634·2d31·302e·332e·320a·2020·2d20·636f··v4-10.3.2.··-·co | ||
| 00040f50:· | 00040f50:·6e66·6967·7572·655f·7374·7261·7465·6779··nfigure_strategy | ||
| 00040f60:· | 00040f60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 00040f70:· | 00040f70:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 00040f80:· | 00040f80:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | ||
| 00040f90:· | 00040f90:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | ||
| 00040fa0:· | 00040fa0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 00040fb0:· | 00040fb0:·6564·0a20·202d·2072·7379·736c·6f67·5f66··ed.··-·rsyslog_f | ||
| 00040fc0:·6 | 00040fc0:·696c·6573·5f67·726f·7570·6f77·6e65·7273··iles_groupowners | ||
| 00040fd0:·6 | 00040fd0:·6869·700a·0a2d·206e·616d·653a·2045·6e73··hip..-·name:·Ens | ||
| 00040fe0:· | 00040fe0:·7572·6520·4c6f·6720·4669·6c65·7320·4172··ure·Log·Files·Ar | ||
| 00040ff0:·6 | 00040ff0:·6520·4f77·6e65·6420·4279·2041·7070·726f··e·Owned·By·Appro | ||
| 00041000:· | 00041000:·7072·6961·7465·2047·726f·7570·202d·2047··priate·Group·-·G | ||
| 00041010:·6 | 00041010:·6574·2049·6e63·6c75·6465·436f·6e66·6967··et·IncludeConfig | ||
| 00041020:· | 00041020:·2064·6972·6563·7469·7665·0a20·2061·6e73···directive.··ans | ||
| 00041030:·6 | 00041030:·6962·6c65·2e62·7569·6c74·696e·2e73·6865··ible.builtin.she | ||
| 00041040:·6 | 00041040:·6c6c·3a20·7c0a·2020·2020·7365·7420·2d6f··ll:·|.····set·-o | ||
| 00041050:· | 00041050:·2070·6970·6566·6169·6c0a·2020·2020·6772···pipefail.····gr | ||
| 00041060:· | 00041060:·6570·202d·6520·2724·496e·636c·7564·6543··ep·-e·'$IncludeC | ||
| 00041070:· | 00041070:·6f6e·6669·6727·207b·7b20·7273·7973·6c6f··onfig'·{{·rsyslo | ||
| 00041080:·5f | 00041080:·675f·6574·635f·636f·6e66·6967·207d·7d20··g_etc_config·}}· | ||
| 00041090:·7 | 00041090:·7c20·6375·7420·2d64·2027·2027·202d·6620··|·cut·-d·'·'·-f· | ||
| 000410a0:· | 000410a0:·3220·7c7c·2074·7275·650a·2020·7265·6769··2·||·true.··regi | ||
| 000410b0:· | 000410b0:·7374·6572·3a20·7273·7973·6c6f·675f·6f6c··ster:·rsyslog_ol | ||
| 000410c0:· | 000410c0:·645f·696e·630a·2020·6368·616e·6765·645f··d_inc.··changed_ | ||
| 000410d0:· | 000410d0:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | ||
| 000410e0:· | 000410e0:·656e·3a0a·2020·2d20·2722·6c69·6e75·782d··en:.··-·'"linux- | ||
| 000410f0:· | 000410f0:·6261·7365·2220·696e·2061·6e73·6962·6c65··base"·in·ansible | ||
| 00041100:· | 00041100:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 00041110:· | 00041110:·0a20·202d·2027·2272·7379·736c·6f67·2220··.··-·'"rsyslog"· | ||
| 00041120:· | 00041120:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 00041130:· | 00041130:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | ||
| 00041140:· | 00041140:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | ||
| 00041150:· | 00041150:·3533·2d41·432d·3628·3129·0a20·202d·204e··53-AC-6(1).··-·N | ||
| 00041160:· | 00041160:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 00041170:· | 00041170:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | ||
| 00041180:·6 | 00041180:·6571·2d31·302e·352e·310a·2020·2d20·5043··eq-10.5.1.··-·PC | ||
| 00041190:· | 00041190:·492d·4453·532d·5265·712d·3130·2e35·2e32··I-DSS-Req-10.5.2 | ||
| 000411a0:· | 000411a0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 000411b0:· | 000411b0:·302e·330a·2020·2d20·5043·492d·4453·5376··0.3.··-·PCI-DSSv | ||
| 000411c0:· | 000411c0:·342d·3130·2e33·2e32·0a20·202d·2063·6f6e··4-10.3.2.··-·con | ||
| 000411d0:· | 000411d0:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | ||
| 000411e0:· | 000411e0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | ||
| 000411f0:·7 | 000411f0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 00041200:· | 00041200:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | ||
| 00041210:· | 00041210:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | ||
| 00041220:·20 | 00041220:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 00041230:·20 | 00041230:·640a·2020·2d20·7273·7973·6c6f·675f·6669··d.··-·rsyslog_fi | ||
| 00041240:·6 | 00041240:·6c65·735f·6772·6f75·706f·776e·6572·7368··les_groupownersh | ||
| 00041250:· | 00041250:·6970·0a0a·2d20·6e61·6d65·3a20·456e·7375··ip..-·name:·Ensu | ||
| 00041260:· | 00041260:·7265·204c·6f67·2046·696c·6573·2041·7265··re·Log·Files·Are | ||
| Max diff block lines reached; 1192142/1298844 bytes (91.78%) of diff not shown. | |||
| Offset 289, 140 lines modified | Offset 289, 14 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- |
| 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value·of | ||
| 307 | IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if·all | ||
| 357 | of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 148471/154117 bytes (96.34%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | ||
| 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aed0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003aee0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003aef0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af00:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003af10:·7365·2220·6964·3d22·6964·6d32·3736·3322··se"·id="idm2763" | |||
| 0003aed0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003aee0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003aef0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003af00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003af10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003af20:·3d22·6964·6d32·3736·3322·3e3c·7072·653e··="idm2763"><pre> | |||
| 0003af30:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003af40:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003af50:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003af60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af | 0003af20:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003af30:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af40:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003af50:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003af60:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003af70:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003af80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003af90:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003af80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003afa0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003afb0:·3d22·2369·646d·3237·3634·2220·7461·6269··="#idm2764"·tabi | |||
| 0003afc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003afd0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003afe0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003aff0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b000:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b010:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b020:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b030:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b040:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b050:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b060:·2269·646d·3237·3634·223e·3c74·6162·6c65··"idm2764"><table | |||
| 0003b070:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b080:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b090:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b0a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b0b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003 | 0003afa0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b0e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b100:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b110:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003afb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b130:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b140:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b150:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b160:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b170:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b180:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b190:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b1a0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003 | 0003afc0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003afd0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003afe0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003aff0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b000:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b010:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b020:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b030:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b040:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b050:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b060:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b070:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b080:·5354·4947·2d55·4254·552d·3230·2d30·3130··STIG-UBTU-20-010 | |||
| 0003b090:·3435·300a·2020·2d20·4e49·5354·2d38·3030··450.··-·NIST-800 | |||
| 0003b0a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b0b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b0c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b0d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b0e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b0f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b100:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b110:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b120:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b130:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b140:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b150:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b160:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b170:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b180:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b190:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b1a0:·6e74·0a20·2077·6865·6e3a·2027·226c·696e··nt.··when:·'"lin | |||
| 0003b1b0:·7578·2d62·6173·6522·2069·6e20·616e·7369··ux-base"·in·ansi | |||
| 0003b1c0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b1d0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b1e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b1f0:·2d20·4449·5341·2d53·5449·472d·5542·5455··-·DISA-STIG-UBTU | |||
| 0003b200:·2d32·302d·3031·3034·3530·0a20·202d·204e··-20-010450.··-·N | |||
| 0003b210:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b220:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b230:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b240:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b250:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b260:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b270:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b280:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b290:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b2a0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b2b0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b2c0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b2d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b2f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b300:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b320:·6d32·3736·3422·2074·6162·696e·6465·783d··m2764"·tabindex= | |||
| 0003b330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b380:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b390:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| Max diff block lines reached; 16624463/16649055 bytes (99.85%) of diff not shown. | |||
| Offset 115, 45 lines modified | Offset 115, 14 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 118 | ············_\x8c_\x8i_\x8s············1.4.1 | 118 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 144 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 155 | ··package_facts: | 128 | ··package_facts: |
| Offset 184, 14 lines modified | Offset 153, 45 lines modified | ||
| 184 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 185 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 186 | ··-·low_complexity | 155 | ··-·low_complexity |
| 187 | ··-·low_disruption | 156 | ··-·low_disruption |
| 188 | ··-·medium_severity | 157 | ··-·medium_severity |
| 189 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 190 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 171 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 188 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·aideinit | 189 | $·sudo·aideinit |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 196 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 192 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 197 | newly-generated·database·can·be·installed·as·follows: | 193 | newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 41 lines modified | Offset 218, 14 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 221 | ············_\x8c_\x8i_\x8s············1.4.1 | 221 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1158007/1163072 bytes (99.56%) of diff not shown. | |||
| Offset 15122, 188 lines modified | Offset 15122, 188 lines modified | ||
| 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | ||
| 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b180:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b190:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1c0:·6964·3d22·6964·6d32·3932·3522·3e3c·7461··id="idm2925"><ta | |||
| 0003b1d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b1e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b1f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b200:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b210:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b220:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b230:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b240:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b180:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b190:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1d0:·6d32·3932·3522·3e3c·7072·653e·3c63·6f64··m2925"><pre><cod | |||
| 0003b1e0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b1f0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b200:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b210:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b220:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b230:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b240:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b250:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b260:·646d·3239·3236·2220·7461·6269·6e64·6578··dm2926"·tabindex | |||
| 0003b270:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b280:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b290:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b2b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b2c0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b2d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b300:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b310:·3239·3236·223e·3c74·6162·6c65·2063·6c61··2926"><table·cla | |||
| 0003b320:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b330:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b340:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b350:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b360:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b380:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b260:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b270:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b3b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b3c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b3e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b3f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b400:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b410:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b420:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b430:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b440:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b450:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b | 0003b290:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b2a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2c0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b2d0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b2e0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b2f0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b300:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b310:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b320:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b330:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b340:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b350:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b360:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b370:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b380:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b390:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b3e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b3f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b400:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b410:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b420:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b430:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b440:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b450:·2077·6865·6e3a·2027·226c·696e·7578·2d62···when:·'"linux-b | |||
| 0003b460:·6173·6522·2069·6e20·616e·7369·626c·655f··ase"·in·ansible_ | |||
| 0003b470:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b480:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b490:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b4a0:·5341·2d53·5449·472d·5542·5455·2d32·322d··SA-STIG-UBTU-22- | |||
| 0003b4b0:·3635·3130·3130·0a20·202d·204e·4953·542d··651010.··-·NIST- | |||
| 0003b4c0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b4d0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b4e0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b4f0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b500:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b510:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b520:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b530:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b540:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b550:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b560:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b570:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b580:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b590:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b5b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5c0:·2d74·6172·6765·743d·2223·6964·6d32·3932··-target="#idm292 | |||
| 0003b5d0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003b5e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b5f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b600:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b610:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b620:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b630:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b640:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| Max diff block lines reached; 7376635/7401227 bytes (99.67%) of diff not shown. | |||
| Offset 125, 45 lines modified | Offset 125, 14 lines modified | ||
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 154 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 155 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 165 | ··package_facts: | 138 | ··package_facts: |
| Offset 194, 14 lines modified | Offset 163, 45 lines modified | ||
| 194 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 195 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 196 | ··-·low_complexity | 165 | ··-·low_complexity |
| 197 | ··-·low_disruption | 166 | ··-·low_disruption |
| 198 | ··-·medium_severity | 167 | ··-·medium_severity |
| 199 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 200 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 181 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 182 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | include·install_aide | ||
| 192 | class·install_aide·{ | ||
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 203 | $·sudo·aideinit | 199 | $·sudo·aideinit |
| 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 205 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 206 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 202 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 207 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 228, 41 lines modified | Offset 228, 14 lines modified | ||
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 231 | ············_\x8c_\x8i_\x8s············1.3.1 | 231 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 238 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 239 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 240 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 241 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 242 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 243 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 244 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 245 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 246 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 249 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 250 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 251 | fi | ||
| 252 | /usr/sbin/aideinit·-y·-f | ||
| 253 | else | ||
| 254 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 255 | fi | ||
| 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 969445/974502 bytes (99.48%) of diff not shown. | |||
| Offset 15112, 188 lines modified | Offset 15112, 188 lines modified | ||
| 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b0e0:·6d65·6469·6174·696f·6e20·4 | 0003b0e0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b0f0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b100:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b110:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b120:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b130:·6d32·3932·3522·3e3c·7461·626c·6520·636c··m2925"><table·cl | |||
| 0003b140:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b150:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b160:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b170:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b180:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b190:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b0f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b100:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b110:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b120:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b130:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b140:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b150:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b160:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b170:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b180:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b190:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1c0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | |||
| 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b230:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b240:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b250:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b260:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b270:·6522·2069·643d·2269·646d·3239·3236·223e··e"·id="idm2926"> | |||
| 0003b280:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b290:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b1b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b1c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b2f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b | 0003b1d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b1e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b1f0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b200:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b330:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b340:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b350:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b360:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b370:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b380:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b390:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b3a0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b3b0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b3c0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003b210:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b220:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b230:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b240:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b250:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b260:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b270:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b280:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b290:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b2a0:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b2b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b2c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b2d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b2e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b2f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b300:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b310:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b320:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b330:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b340:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b350:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b360:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b370:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b380:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b390:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b3a0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b3b0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b3c0:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b3d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b3e0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b3f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b400:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b410:·472d·5542·5455·2d32·322d·3635·3130·3130··G-UBTU-22-651010 | |||
| 0003b420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b430:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b440:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b450:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b460:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b470:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b480:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b490:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b4b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b4c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b4d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b4e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b500:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b510:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b520:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b530:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b540:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b550:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b560:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b570:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b580:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b590:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b5a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b5b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b5c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| Max diff block lines reached; 7217095/7241687 bytes (99.66%) of diff not shown. | |||
| Offset 123, 45 lines modified | Offset 123, 14 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 126 | ············_\x8c_\x8i_\x8s············1.3.1 | 126 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 152 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 153 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | -·name:·Gather·the·package·facts | 135 | -·name:·Gather·the·package·facts |
| 163 | ··package_facts: | 136 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 161, 45 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 163 | ··-·low_complexity |
| 195 | ··-·low_disruption | 164 | ··-·low_disruption |
| 196 | ··-·medium_severity | 165 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 179 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 180 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·aideinit | 197 | $·sudo·aideinit |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 226, 41 lines modified | Offset 226, 14 lines modified | ||
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 229 | ············_\x8c_\x8i_\x8s············1.3.1 | 229 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 235 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 236 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 237 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 238 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 239 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 240 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 243 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 244 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 245 | fi | ||
| 246 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 247 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 248 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 249 | fi | ||
| 250 | /usr/sbin/aideinit·-y·-f | ||
| 251 | else | ||
| 252 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 253 | fi | ||
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 952079/957136 bytes (99.47%) of diff not shown. | |||
| Offset 15129, 188 lines modified | Offset 15129, 188 lines modified | ||
| 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b1f0:·6d65·6469·6174·696f·6e20·4 | 0003b1f0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b200:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b210:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b220:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b230:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b240:·6d32·3932·3522·3e3c·7461·626c·6520·636c··m2925"><table·cl | |||
| 0003b250:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b260:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b270:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b280:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b290:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b2a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b200:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b210:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b220:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b230:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b240:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b250:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b260:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b270:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b280:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b290:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b2a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b2b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2d0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | |||
| 0003b2e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b2f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b300:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b310:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b320:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b330:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b340:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3239·3236·223e··e"·id="idm2926"> | |||
| 0003b390:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b3a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b3b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b3c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b3d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b2c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b2d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b400:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b410:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003b2e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b2f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b300:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b310:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b440:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b450:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b460:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b470:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b480:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b490:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b4a0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b4b0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b4c0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b4d0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003b320:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b330:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b340:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b350:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b360:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b370:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b380:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b390:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b3a0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b3b0:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b3c0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b3d0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b3e0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b3f0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b400:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b410:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b420:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b430:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b440:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b450:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b460:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b470:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b480:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b490:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b4a0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b4b0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b4c0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b4d0:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b4e0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b4f0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b500:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b510:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b520:·472d·5542·5455·2d32·322d·3635·3130·3130··G-UBTU-22-651010 | |||
| 0003b530:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b540:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b550:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b560:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b570:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b580:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b590:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5a0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5b0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b5c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b5d0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b5e0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b5f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b600:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b610:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b620:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b630:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b640:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b650:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b660:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b670:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b680:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b690:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6a0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b6b0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b6c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 21487969/21512561 bytes (99.89%) of diff not shown. | |||
| Offset 15125, 188 lines modified | Offset 15125, 188 lines modified | ||
| 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | ||
| 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | ||
| 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1b0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b1c0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b1e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b1f0:·6170·7365·2220·6964·3d22·6964·6d32·3932··apse"·id="idm292 | |||
| 0003b200:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b210:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b220:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b230:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b240:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b250:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b260:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b270:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b1b0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b1c0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b200:·6964·3d22·6964·6d32·3932·3522·3e3c·7072··id="idm2925"><pr | |||
| 0003b210:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b220:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b230:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b240:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b250:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b260:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b270:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b280:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b290:·6574·3d22·2369·646d·3239·3236·2220·7461··et="#idm2926"·ta | |||
| 0003b2a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b2c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b2d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b2e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b2f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b300:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3239·3236·223e·3c74·6162··d="idm2926"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b280:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b450:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b460:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b470:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b480:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b | 0003b2a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b2b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2d0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b2e0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b2f0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b300:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b310:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b320:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b330:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b340:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b350:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b360:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b370:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b380:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b390:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b3a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b3b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b3c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b3d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b400:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b410:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b420:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b430:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b440:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b450:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b460:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b470:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b480:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b490:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b4a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b4b0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b4c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b4d0:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b4e0:·5455·2d32·322d·3635·3130·3130·0a20·202d··TU-22-651010.··- | |||
| 0003b4f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b500:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b510:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b520:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b530:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b540:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b550:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b560:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b570:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b580:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b590:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b5a0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b5b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b600:·6964·6d32·3932·3622·2074·6162·696e·6465··idm2926"·tabinde | |||
| 0003b610:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b620:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b630:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b640:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b650:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b660:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| Max diff block lines reached; 21444031/21468623 bytes (99.89%) of diff not shown. | |||
| Offset 16531, 783 lines modified | Offset 16531, 783 lines modified | ||
| 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | ||
| 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 00040990:·20 | 00040990:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 000409a0:·b23c | 000409a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 000409b0:·6173 | 000409b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 000409c0:·7073 | 000409c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 000409d0:·3d | 000409d0:·2069·643d·2269·646d·3131·3631·3722·3e3c···id="idm11617">< | ||
| 000409e0:· | 000409e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 000409f0:· | 000409f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00040a00:· | 00040a00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 00040a10:· | 00040a10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 00040a20:· | 00040a20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 00040a30:·77 | 00040a30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 00040a40:· | 00040a40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00040a50:· | 00040a50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 00040a60:·6 | 00040a60:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 00040a70:· | 00040a70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 00040a80:· | 00040a80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 00040a90:· | 00040a90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 00040aa0:· | 00040aa0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00040ab0:· | 00040ab0:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 00040ac0:· | 00040ac0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00040ad0:·6 | 00040ad0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 00040ae0:·6 | 00040ae0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 00040af0:·7 | 00040af0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 00040b00:· | 00040b00:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 00040b10:· | 00040b10:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 00040b20:· | 00040b20:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | ||
| 00040b30:· | 00040b30:·542d·3830·302d·3533·2d41·432d·3628·3129··T-800-53-AC-6(1) | ||
| 00040b40:·0a2 | 00040b40:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 00040b50:· | 00040b50:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | ||
| 00040b60:· | 00040b60:·2d44·5353·2d52·6571·2d31·302e·352e·310a··-DSS-Req-10.5.1. | ||
| 00040b70:·2 | 00040b70:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 00040b80:· | 00040b80:·3130·2e35·2e32·0a20·202d·2050·4349·2d44··10.5.2.··-·PCI-D | ||
| 00040b90:· | 00040b90:·5353·7634·2d31·302e·330a·2020·2d20·5043··SSv4-10.3.··-·PC | ||
| 00040ba0:· | 00040ba0:·492d·4453·5376·342d·3130·2e33·2e32·0a20··I-DSSv4-10.3.2.· | ||
| 00040bb0:·20 | 00040bb0:·202d·2063·6f6e·6669·6775·7265·5f73·7472···-·configure_str | ||
| 00040bc0:·6 | 00040bc0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | ||
| 00040bd0:·6 | 00040bd0:·6d70·6c65·7869·7479·0a20·202d·206d·6564··mplexity.··-·med | ||
| 00040be0:· | 00040be0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 00040bf0:· | 00040bf0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | ||
| 00040c00:· | 00040c00:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | ||
| 00040c10:· | 00040c10:·5f6e·6565·6465·640a·2020·2d20·7273·7973··_needed.··-·rsys | ||
| 00040c20:·6 | 00040c20:·6c6f·675f·6669·6c65·735f·6772·6f75·706f··log_files_groupo | ||
| 00040c30:· | 00040c30:·776e·6572·7368·6970·0a0a·2d20·6e61·6d65··wnership..-·name | ||
| 00040c40:· | 00040c40:·3a20·456e·7375·7265·204c·6f67·2046·696c··:·Ensure·Log·Fil | ||
| 00040c50:·6 | 00040c50:·6573·2041·7265·204f·776e·6564·2042·7920··es·Are·Owned·By· | ||
| 00040c60:· | 00040c60:·4170·7072·6f70·7269·6174·6520·4772·6f75··Appropriate·Grou | ||
| 00040c70:· | 00040c70:·7020·2d20·5365·7420·7273·7973·6c6f·6720··p·-·Set·rsyslog· | ||
| 00040c80:· | 00040c80:·6c6f·6766·696c·6520·636f·6e66·6967·7572··logfile·configur | ||
| 00040c90:·6 | 00040c90:·6174·696f·6e0a·2020·2020·6661·6374·730a··ation.····facts. | ||
| 00040ca0:· | 00040ca0:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | ||
| 00040cb0:·6 | 00040cb0:·6e2e·7365·745f·6661·6374·3a0a·2020·2020··n.set_fact:.···· | ||
| 00040cc0:· | 00040cc0:·7273·7973·6c6f·675f·6574·635f·636f·6e66··rsyslog_etc_conf | ||
| 00040cd0:· | 00040cd0:·6967·3a20·2f65·7463·2f72·7379·736c·6f67··ig:·/etc/rsyslog | ||
| 00040ce0:·2 | 00040ce0:·2e63·6f6e·660a·2020·7768·656e·3a0a·2020··.conf.··when:.·· | ||
| 00040cf0:· | 00040cf0:·2d20·2722·6c69·6e75·782d·6261·7365·2220··-·'"linux-base"· | ||
| 00040d00:· | 00040d00:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 00040d10:·2 | 00040d10:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | ||
| 00040d20:· | 00040d20:·2272·7379·736c·6f67·2220·696e·2061·6e73··"rsyslog"·in·ans | ||
| 00040d30:· | 00040d30:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 00040d40:· | 00040d40:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | ||
| 00040d50:· | 00040d50:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | ||
| 00040d60:· | 00040d60:·3628·3129·0a20·202d·204e·4953·542d·3830··6(1).··-·NIST-80 | ||
| 00040d70:· | 00040d70:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | ||
| 00040d80:·2 | 00040d80:·2050·4349·2d44·5353·2d52·6571·2d31·302e···PCI-DSS-Req-10. | ||
| 00040d90:· | 00040d90:·352e·310a·2020·2d20·5043·492d·4453·532d··5.1.··-·PCI-DSS- | ||
| 00040da0:· | 00040da0:·5265·712d·3130·2e35·2e32·0a20·202d·2050··Req-10.5.2.··-·P | ||
| 00040db0:· | 00040db0:·4349·2d44·5353·7634·2d31·302e·330a·2020··CI-DSSv4-10.3.·· | ||
| 00040dc0:· | 00040dc0:·2d20·5043·492d·4453·5376·342d·3130·2e33··-·PCI-DSSv4-10.3 | ||
| 00040dd0:·2 | 00040dd0:·2e32·0a20·202d·2063·6f6e·6669·6775·7265··.2.··-·configure | ||
| 00040de0:· | 00040de0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 00040df0:· | 00040df0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 00040e00:· | 00040e00:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 00040e10:·6e20·2 | 00040e10:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | ||
| 00040e20:· | 00040e20:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | ||
| 00040e30:·6 | 00040e30:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 00040e40:· | 00040e40:·7273·7973·6c6f·675f·6669·6c65·735f·6772··rsyslog_files_gr | ||
| 00040e50:· | 00040e50:·6f75·706f·776e·6572·7368·6970·0a0a·2d20··oupownership..-· | ||
| 00040e60:· | 00040e60:·6e61·6d65·3a20·456e·7375·7265·204c·6f67··name:·Ensure·Log | ||
| 00040e70:· | 00040e70:·2046·696c·6573·2041·7265·204f·776e·6564···Files·Are·Owned | ||
| 00040e80:· | 00040e80:·2042·7920·4170·7072·6f70·7269·6174·6520···By·Appropriate· | ||
| 00040e90:· | 00040e90:·4772·6f75·7020·2d20·4765·7420·496e·636c··Group·-·Get·Incl | ||
| 00040ea0:· | 00040ea0:·7564·6543·6f6e·6669·6720·6469·7265·6374··udeConfig·direct | ||
| 00040eb0:· | 00040eb0:·6976·650a·2020·616e·7369·626c·652e·6275··ive.··ansible.bu | ||
| 00040ec0:·6 | 00040ec0:·696c·7469·6e2e·7368·656c·6c3a·207c·0a20··iltin.shell:·|.· | ||
| 00040ed0:· | 00040ed0:·2020·2073·6574·202d·6f20·7069·7065·6661·····set·-o·pipefa | ||
| 00040ee0:· | 00040ee0:·696c·0a20·2020·2067·7265·7020·2d65·2027··il.····grep·-e·' | ||
| 00040ef0:· | 00040ef0:·2449·6e63·6c75·6465·436f·6e66·6967·2720··$IncludeConfig'· | ||
| 00040f00:· | 00040f00:·7b7b·2072·7379·736c·6f67·5f65·7463·5f63··{{·rsyslog_etc_c | ||
| 00040f10:· | 00040f10:·6f6e·6669·6720·7d7d·207c·2063·7574·202d··onfig·}}·|·cut·- | ||
| 00040f20:· | 00040f20:·6420·2720·2720·2d66·2032·207c·7c20·7472··d·'·'·-f·2·||·tr | ||
| 00040f30:· | 00040f30:·7565·0a20·2072·6567·6973·7465·723a·2072··ue.··register:·r | ||
| 00040f40:· | 00040f40:·7379·736c·6f67·5f6f·6c64·5f69·6e63·0a20··syslog_old_inc.· | ||
| 00040f50:·2 | 00040f50:·2063·6861·6e67·6564·5f77·6865·6e3a·2066···changed_when:·f | ||
| 00040f60:·6 | 00040f60:·616c·7365·0a20·2077·6865·6e3a·0a20·202d··alse.··when:.··- | ||
| 00040f70:· | 00040f70:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | ||
| 00040f80:· | 00040f80:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 00040f90:·7 | 00040f90:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 00040fa0:· | 00040fa0:·7273·7973·6c6f·6722·2069·6e20·616e·7369··rsyslog"·in·ansi | ||
| 00040fb0:·6 | 00040fb0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 00040fc0:· | 00040fc0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | ||
| 00040fd0:· | 00040fd0:·4e49·5354·2d38·3030·2d35·332d·4143·2d36··NIST-800-53-AC-6 | ||
| 00040fe0:· | 00040fe0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 00040ff0:·2 | 00040ff0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | ||
| 00041000:· | 00041000:·5043·492d·4453·532d·5265·712d·3130·2e35··PCI-DSS-Req-10.5 | ||
| 00041010:·2 | 00041010:·2e31·0a20·202d·2050·4349·2d44·5353·2d52··.1.··-·PCI-DSS-R | ||
| 00041020:· | 00041020:·6571·2d31·302e·352e·320a·2020·2d20·5043··eq-10.5.2.··-·PC | ||
| 00041030:· | 00041030:·492d·4453·5376·342d·3130·2e33·0a20·202d··I-DSSv4-10.3.··- | ||
| 00041040:· | 00041040:·2050·4349·2d44·5353·7634·2d31·302e·332e···PCI-DSSv4-10.3. | ||
| 00041050:· | 00041050:·320a·2020·2d20·636f·6e66·6967·7572·655f··2.··-·configure_ | ||
| 00041060:· | 00041060:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | ||
| 00041070:· | 00041070:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 00041080:· | 00041080:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 00041090:·6 | 00041090:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | ||
| 000410a0:· | 000410a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | ||
| 000410b0:·6 | 000410b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 000410c0:·7 | 000410c0:·7379·736c·6f67·5f66·696c·6573·5f67·726f··syslog_files_gro | ||
| 000410d0:· | 000410d0:·7570·6f77·6e65·7273·6869·700a·0a2d·206e··upownership..-·n | ||
| 000410e0:·6 | 000410e0:·616d·653a·2045·6e73·7572·6520·4c6f·6720··ame:·Ensure·Log· | ||
| 000410f0:· | 000410f0:·4669·6c65·7320·4172·6520·4f77·6e65·6420··Files·Are·Owned· | ||
| Max diff block lines reached; 1193039/1299741 bytes (91.79%) of diff not shown. | |||
| Offset 289, 140 lines modified | Offset 289, 14 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 307 | of·IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 357 | all·of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 152156/157806 bytes (96.42%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | ||
| 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aed0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aee0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aef0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003af00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003af10:·6522·2069·643d·2269·646d·3239·3235·223e··e"·id="idm2925"> | |||
| 0003af20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003af30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003af40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003af50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af90:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003aed0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003aee0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003aef0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af20:·2269·646d·3239·3235·223e·3c70·7265·3e3c··"idm2925"><pre>< | |||
| 0003af30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003af40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003af50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003af60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003af70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003af80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003af90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003afa0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003afb0:·2223·6964·6d32·3932·3622·2074·6162·696e··"#idm2926"·tabin | |||
| 0003afc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003afd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003afe0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003aff0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b000:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b010:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b020:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b060:·6964·6d32·3932·3622·3e3c·7461·626c·6520··idm2926"><table· | |||
| 0003b070:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b080:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b090:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b0a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b0b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003 | 0003afa0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003afb0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003 | 0003afc0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003afd0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003afe0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003aff0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b120:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b130:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b140:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b150:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b160:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b170:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b180:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b190:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b1a0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b | 0003b000:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b010:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b020:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b030:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b040:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b050:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b060:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b070:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b080:·5449·472d·5542·5455·2d32·322d·3635·3130··TIG-UBTU-22-6510 | |||
| 0003b090:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b0a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b0b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b0c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b0d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b0e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b0f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b100:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b110:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b120:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b130:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b140:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b150:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b160:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b170:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b180:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b190:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b1a0:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b1b0:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b1c0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b1d0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b1e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b1f0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b200:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b210:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b220:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b230:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b240:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b250:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b260:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b270:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b280:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b290:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b2a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b2b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b2c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b2d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b2e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b2f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b300:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b310:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b320:·3239·3236·2220·7461·6269·6e64·6578·3d22··2926"·tabindex=" | |||
| 0003b330:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b340:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b350:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b360:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b370:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b380:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b390:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b3a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b3b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b3c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| Max diff block lines reached; 17085050/17109642 bytes (99.86%) of diff not shown. | |||
| Offset 115, 45 lines modified | Offset 115, 14 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 118 | ············_\x8c_\x8i_\x8s············1.3.1 | 118 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 144 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 155 | ··package_facts: | 128 | ··package_facts: |
| Offset 184, 14 lines modified | Offset 153, 45 lines modified | ||
| 184 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 185 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 186 | ··-·low_complexity | 155 | ··-·low_complexity |
| 187 | ··-·low_disruption | 156 | ··-·low_disruption |
| 188 | ··-·medium_severity | 157 | ··-·medium_severity |
| 189 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 190 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 171 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 188 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·aideinit | 189 | $·sudo·aideinit |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 196 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 192 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 197 | generated·database·can·be·installed·as·follows: | 193 | generated·database·can·be·installed·as·follows: |
| Offset 218, 41 lines modified | Offset 218, 14 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 221 | ············_\x8c_\x8i_\x8s············1.3.1 | 221 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1224033/1229091 bytes (99.59%) of diff not shown. | |||
| Offset 15092, 184 lines modified | Offset 15092, 184 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | ||
| 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003afb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afe0:·6170·7365·2220·6964·3d22·6964·6d32·3536··apse"·id="idm256 | |||
| 0003aff0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b000:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b010:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b020:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b030:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b040:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b050:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b060:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d32·3536·3922·3e3c·7072··id="idm2569"><pr | |||
| 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b080:·6574·3d22·2369·646d·3235·3730·2220·7461··et="#idm2570"·ta | |||
| 0003b090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b0f0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b130:·643d·2269·646d·3235·3730·223e·3c74·6162··d="idm2570"><tab | |||
| 0003b140:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b150:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b160:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b170:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b180:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b070:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b080:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b090:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b0a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b0f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b100:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b110:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b120:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b130:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b140:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b150:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b160:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b170:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b180:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b190:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b200:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b210:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b220:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b230:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b240:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b250:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b260:·2722·6c69·6e75·782d·6261·7365·2220·696e··'"linux-base"·in | |||
| 0003b270:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b280:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b290:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b2a0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b2b0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2e0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b300:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b310:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b320:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b330:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b340:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b350:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b360:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b370:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b380:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b390:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b3a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b3b0:·6765·743d·2223·6964·6d32·3537·3022·2074··get="#idm2570"·t | |||
| 0003b3c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b400:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b410:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b420:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b430:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b440:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b450:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b460:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b470:·646d·3235·3730·223e·3c70·7265·3e3c·636f··dm2570"><pre><co | |||
| 0003b480:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b490:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b4a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b4b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b4f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b500:·6964·6d32·3537·3122·2074·6162·696e·6465··idm2571"·tabinde | |||
| 0003b510:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b520:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| Max diff block lines reached; 9218165/9242205 bytes (99.74%) of diff not shown. | |||
| Offset 121, 45 lines modified | Offset 121, 14 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.3.1 | 126 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 150 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 151 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 134 | ··package_facts: |
| Offset 188, 14 lines modified | Offset 157, 45 lines modified | ||
| 188 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 189 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 190 | ··-·low_complexity | 159 | ··-·low_complexity |
| 191 | ··-·low_disruption | 160 | ··-·low_disruption |
| 192 | ··-·medium_severity | 161 | ··-·medium_severity |
| 193 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 194 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 175 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 176 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | include·install_aide | ||
| 186 | class·install_aide·{ | ||
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·aideinit | 193 | $·sudo·aideinit |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 200 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 196 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 201 | be·installed·as·follows: | 197 | be·installed·as·follows: |
| Offset 220, 41 lines modified | Offset 220, 14 lines modified | ||
| 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ············_\x8c_\x8i_\x8s············6.3.1 | 225 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 230 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 231 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 232 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 233 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 234 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 235 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 236 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 237 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 238 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 239 | fi | ||
| 240 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | /usr/sbin/aideinit·-y·-f | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1210108/1215227 bytes (99.58%) of diff not shown. | |||
| Offset 15083, 185 lines modified | Offset 15083, 185 lines modified | ||
| 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | ||
| 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003af10:·656d·6564·6961·7469·6f6e·204 | 0003af10:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003af20:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003af30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003af40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003af50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af60:·646d·3235·3639·223e·3c74·6162·6c65·2063··dm2569"><table·c | |||
| 0003af70:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003af80:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003af90:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003afa0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003afb0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003afc0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003afd0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003af20:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003af30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af60:·7073·6522·2069·643d·2269·646d·3235·3639··pse"·id="idm2569 | |||
| 0003af70:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003af80:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003af90:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003afa0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003afb0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afc0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003afd0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003afe0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aff0:·2d74·6172·6765·743d·2223·6964·6d32·3537··-target="#idm257 | |||
| 0003b000:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b010:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b020:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b030:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b040:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b050:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b060:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b070:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b080:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b090:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0a0:·7365·2220·6964·3d22·6964·6d32·3537·3022··se"·id="idm2570" | |||
| 0003b0b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b0c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b0f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003afe0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003aff0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b000:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b010:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b020:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b030:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b040:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b050:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b060:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b070:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b080:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b090:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b0a0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b0b0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b0c0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b0d0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b0e0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b0f0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b100:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b110:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b120:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b130:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b140:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b150:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b160:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b170:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b180:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b190:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b1a0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b1b0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b1c0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b1d0:·6865·6e3a·2027·226c·696e·7578·2d62·6173··hen:·'"linux-bas | |||
| 0003b1e0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003b1f0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b200:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b210:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b220:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b230:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b240:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b250:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b260:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b270:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b280:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b290:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b2a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b2b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b2c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b2d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b2e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b2f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b300:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b310:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b320:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b330:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 0003b340:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b350:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b360:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b370:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b380:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b390:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b3a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b3b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b3c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b3d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b3e0:·6964·3d22·6964·6d32·3537·3022·3e3c·7072··id="idm2570"><pr | |||
| 0003b3f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b400:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b410:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b420:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b430:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b440:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b450:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b460:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b470:·6574·3d22·2369·646d·3235·3731·2220·7461··et="#idm2571"·ta | |||
| 0003b480:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b490:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| Max diff block lines reached; 8970107/8994285 bytes (99.73%) of diff not shown. | |||
| Offset 120, 45 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.3.1 | 125 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 149 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 150 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 160 | ··package_facts: | 133 | ··package_facts: |
| Offset 187, 14 lines modified | Offset 156, 45 lines modified | ||
| 187 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 188 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 189 | ··-·low_complexity | 158 | ··-·low_complexity |
| 190 | ··-·low_disruption | 159 | ··-·low_disruption |
| 191 | ··-·medium_severity | 160 | ··-·medium_severity |
| 192 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 193 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 173 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 174 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·aideinit | 192 | $·sudo·aideinit |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 198 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 194 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 199 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 195 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 200 | be·installed·as·follows: | 196 | be·installed·as·follows: |
| Offset 219, 41 lines modified | Offset 219, 14 lines modified | ||
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8c_\x8i_\x8s············6.3.1 | 224 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 229 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 230 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 231 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 232 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 233 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 234 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 235 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 236 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 237 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 238 | fi | ||
| 239 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 240 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 241 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | /usr/sbin/aideinit·-y·-f | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1177587/1182706 bytes (99.57%) of diff not shown. | |||
| Offset 15127, 184 lines modified | Offset 15127, 184 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b200:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b210:·6964·3d22·6964·6d32·3536·3922·3e3c·7461··id="idm2569"><ta | |||
| 0003b220:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b230:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b240:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b250:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b260:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b270:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b290:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b1e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b220:·6d32·3536·3922·3e3c·7072·653e·3c63·6f64··m2569"><pre><cod | |||
| 0003b230:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b240:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b250:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b260:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b270:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b280:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b290:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2b0:·646d·3235·3730·2220·7461·6269·6e64·6578··dm2570"·tabindex | |||
| 0003b2c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b300:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b310:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b320:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b330:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b340:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b350:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b360:·3235·3730·223e·3c74·6162·6c65·2063·6c61··2570"><table·cla | |||
| 0003b370:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b380:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b390:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b2a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b2b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b2c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b300:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b310:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b320:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b330:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b340:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b350:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b360:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b370:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b380:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b390:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b3a0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b3b0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3c0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b3d0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b3e0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3f0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b400:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b410:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b420:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b430:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b440:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b450:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b460:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b470:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b480:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b490:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b4a0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b4b0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b4c0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b4d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b4e0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b4f0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b500:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b510:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b520:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b530:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b540:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b550:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b560:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b570:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b580:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b590:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5a0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5b0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5c0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5d0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b5e0:·6964·6d32·3537·3022·2074·6162·696e·6465··idm2570"·tabinde | |||
| 0003b5f0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b600:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b610:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b620:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b630:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b640:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b650:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b660:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b670:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b680:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b690:·7073·6522·2069·643d·2269·646d·3235·3730··pse"·id="idm2570 | |||
| 0003b6a0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b6b0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b6c0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b6d0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b6e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b700:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b710:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b720:·2d74·6172·6765·743d·2223·6964·6d32·3537··-target="#idm257 | |||
| 0003b730:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b740:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b750:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| Max diff block lines reached; 19768432/19792472 bytes (99.88%) of diff not shown. | |||
| Offset 15123, 184 lines modified | Offset 15123, 184 lines modified | ||
| 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | ||
| 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b190:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b1a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b1b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b1c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b1d0:·2069·643d·2269·646d·3235·3639·223e·3c74···id="idm2569"><t | |||
| 0003b1e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b1f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b200:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b210:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b220:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b230:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b240:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b250:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b190:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b1a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b1b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b1c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b1d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b1e0:·646d·3235·3639·223e·3c70·7265·3e3c·636f··dm2569"><pre><co | |||
| 0003b1f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b200:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b210:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b220:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b230:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b240:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b250:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b260:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b270:·6964·6d32·3537·3022·2074·6162·696e·6465··idm2570"·tabinde | |||
| 0003b280:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b290:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b2a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b2b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b2c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b2d0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b2e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b300:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b310:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b320:·6d32·3537·3022·3e3c·7461·626c·6520·636c··m2570"><table·cl | |||
| 0003b330:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b340:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b350:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b360:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b370:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b260:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b280:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b290:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b2b0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b2e0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b2f0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b300:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b310:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b320:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b330:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b340:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b350:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b360:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b370:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b380:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b390:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b3a0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b3b0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b3c0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b3d0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b3e0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b3f0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b400:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b410:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b420:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b430:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b440:·6e74·0a20·2077·6865·6e3a·2027·226c·696e··nt.··when:·'"lin | |||
| 0003b450:·7578·2d62·6173·6522·2069·6e20·616e·7369··ux-base"·in·ansi | |||
| 0003b460:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b470:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b480:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b490:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b4a0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b4b0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b4c0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b4d0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b4e0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b4f0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b500:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b510:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b520:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b530:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b540:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b550:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b560:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b570:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b580:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b590:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b5a0:·2369·646d·3235·3730·2220·7461·6269·6e64··#idm2570"·tabind | |||
| 0003b5b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b5c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b5d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b5e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b5f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b600:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b610:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b620:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b630:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b640:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b650:·6170·7365·2220·6964·3d22·6964·6d32·3537··apse"·id="idm257 | |||
| 0003b660:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b670:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b680:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b690:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b6a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b6b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b6c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b6d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6e0:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b6f0:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003b700:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b710:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| Max diff block lines reached; 19697106/19721146 bytes (99.88%) of diff not shown. | |||
| Offset 3, 2745 lines modified | Offset 3, 2745 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_gshadow_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·Group·Who·Owns·gshadow·File</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-dir_ownership_binary_dirs_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_var_tmp_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Configure·Polyinstantiation·of·/var/tmp·Directories</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_var_tmp_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_login_defs_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fsetxattr_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fsetxattr</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-a | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fsetxattr_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-grub2_slab_nomerge_argument_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·merging·of·slabs·with·similar·size</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-grub2_slab_nomerge_argument_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-ss | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Prevent·Routing·External·Traffic·to·Local·Loopback·on·All·IPv4·Interfaces</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-ss | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-sudo_vdsm_nopasswd_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Only·the·VDSM·User·Can·Use·sudo·NOPASSWD</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sudo_vdsm_nopasswd_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_FIPS_certified_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>The·Installed·Operating·System·Is·FIPS·140-2·Certified</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-installed_OS_is_FIPS_certified_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_rds_disabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·RDS·Support</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_rds_disabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable·different·security·models</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_configuration_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Root·Ownership</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-service_timesyncd_enabled_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Enable·systemd_timesyncd·Service</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-service_timesyncd_enabled_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-prefer_64bit_os_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Prefer·to·use·a·64-bit·Operating·System·when·supported</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-prefer_64bit_os_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-s | 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_tcp_forwarding_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·SSH·TCP·Forwarding</ocil:title> |
| Max diff block lines reached; 662927/675166 bytes (98.19%) of diff not shown. | |||
| Offset 3, 3685 lines modified | Offset 3, 3685 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_ntp_enabled_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ipv6_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·that·System·Executable·Directories·Have·Restrictive·Permissions</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-service_ntp_enabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_mce_argument_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Force·kernel·panic·on·uncorrected·MCEs</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_mce_argument_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-d | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pubkey_auth_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Enable·Public·Key·Authentication</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-d | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-pa | 28 | ····<ocil:questionnaire·id="ocil:ssg-package_cron_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Install·the·cron·service</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-pa | 31 | ········<ocil:test_action_ref>ocil:ssg-package_cron_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_tmp_nodev_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Add·nodev·Option·to·/tmp</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-mount_option_tmp_nodev_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_vdso_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·the·32-bit·vDSO</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_vdso_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_hash_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Set· | 47 | ······<ocil:title>Specify·the·hash·to·use·when·signing·modules</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_hash_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-configure_user_data_backups_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Configure·Backups·of·User·Data</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-configure_user_data_backups_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_ipv6_option_disabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·IPv6·Networking·Support·Automatic·Loading</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_ipv6_option_disabled_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-grub2_enable_iommu_force_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>IOMMU·configuration·directive</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_iommu_force_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_r | 76 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure· | 77 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_r | 79 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Configure·Low·Address·Space·To·Protect·From·User·Allocation</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_default_mmap_min_addr_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_binary_dirs_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Verify·that·System·Executables·Have·Restrictive·Permissions</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_sg_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Enable·checks·on·scatter-gather·(SG)·table·operations</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_sg_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_timeout_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Kernel·panic·timeout</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_timeout_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> | 107 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> | ||
| 119 | ······<ocil:title>Disable·the·Automounter</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-service_autofs_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 122 | ······</ocil:actions> | ||
| 123 | ····</ocil:questionnaire> | ||
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_rsa_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Di | 113 | ······<ocil:title>Disable·SSH·Support·for·Rhosts·RSA·Authentication</ocil:title> |
| 126 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| Max diff block lines reached; 693249/705047 bytes (98.33%) of diff not shown. | |||
| Offset 3, 6334 lines modified | Offset 3, 6334 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-service_ntp_enabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-service_ntp_enabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_remote_loghost_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·Logs·Sent·To·Remote·Host</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_remote_loghost_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-ufw_rate_limit_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>ufw·Must·rate-limit·network·interfaces</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-ufw_rate_limit_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_configure_sufficiently_large_partition_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·a·Sufficiently·Large·Partition·for·Audit·Logs</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_configure_sufficiently_large_partition_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_sudo_log_events_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Record·Attempts·to·perform·maintenance·activities</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_sudo_log_events_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-verify_use_mappers_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·that·'use_mappers'·is·set·to·'pwent'·in·PAM</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-verify_use_mappers_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ipv6_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·the·IPv6·protocol</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ipv6_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_force_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Require·modules·to·be·validly·signed</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_force_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_syslog_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Permissions·on·/var/log/syslog·File</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·Kernel·Parameter·to·Log·Martian·Packets·on·all·IPv4·Interfaces</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-aide_periodic_cron_checking_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Configure·Periodic·Execution·of·AIDE</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-aide_periodic_cron_checking_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Verify·User·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·X11·Forwarding</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-e | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_kdump_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·KDump·Kernel·Crash·Analyzer·(kdump)</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-e | 97 | ········<ocil:test_action_ref>ocil:ssg-service_kdump_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> | ||
| 101 | ····· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_creat_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·creat</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-a | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_creat_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_allow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·Group·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_group_ownership_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>User·Initialization·Files·Must·Be·Group-Owned·By·The·Primary·Group</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_dot_group_ownership_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·Accepting·Router·Advertisements·on·all·IPv6·Interfaces·by·Default</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1352351/1364534 bytes (99.11%) of diff not shown. | |||
| Offset 3, 4616 lines modified | Offset 3, 4616 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·User·Who·Owns· | 11 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_ | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_gssapi_auth_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chfn_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chfn</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chfn_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-ensure_shadow_group_empty_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·shadow·Group·is·Empty</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-ensure_shadow_group_empty_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_postdrop_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure· | 35 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_user_ownership_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_grub2_cfg_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify· | 47 | ······<ocil:title>Verify·/boot/grub/grub.cfg·User·Ownership</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Lock·Accounts·After·Failed·Password·Attempts</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_deny_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 59 | ····· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-a | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-a | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_postqueue_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure· | 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·postqueue</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_postqueue_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Configure·auditd·Max·Log·File·Size</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-socket_systemd-journal-remote_disabled_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudoedit_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-grub2_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·nftables·Service·is·Enabled</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-service_nftables_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_var_log_audit_stig_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>System·Audit·Logs·Must·Be·Owned·By·Root</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_var_log_audit_stig_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Configure·auditd·Disk·Full·Action·when·Disk·Space·Is·Full</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_ | 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_full_action_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-prevent_direct_root_logins_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_enforcing_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_disable_autorun_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·GNOME3·Automount·running</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_disable_autorun_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_id_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure· | 119 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·ID</ocil:title> |
| Max diff block lines reached; 1414538/1426962 bytes (99.13%) of diff not shown. | |||
| Offset 3, 7578 lines modified | Offset 3, 7671 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_log_nosuid_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Add·nosuid·Option·to·/var/log</ocil:title> | ||
| 11 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ungroupowned_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·Group</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ungroupowned_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_lock_delay_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Set·GNOME3·Screensaver·Lock·Delay·After·Activation·Period</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_log_nosuid_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-d | 16 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable· | 17 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-d | 19 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-s | 28 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>The·Chronyd·service·is·enabled</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 31 | ········<ocil:test_action_ref>ocil:ssg-service_chronyd_enabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_issue_net_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-socket_systemd-journal-remote_disabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable·systemd-journal-remote·Socket</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-socket_systemd-journal-remote_disabled_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_filecreatemode_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_group_ownership_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>User·Initialization·Files·Must·Be·Group-Owned·By·The·Primary·Group</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_dot_group_ownership_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-di | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-di | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-systemd_journal_upload_server_tls_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Configure·systemd-journal-upload·TLS·parameters:·ServerKeyFile,·ServerCertificateFile·and·TrustedCertificateFile</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-systemd_journal_upload_server_tls_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_home_directories_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Owned·By·The·Primary·User</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_ | 61 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_home_directories_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_motd_cis_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·Message·Of·The·Day·Is·Configured·Properly</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_motd_cis_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-package_talk_removed_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_lock_delay_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Set·GNOME3·Screensaver·Lock·Delay·After·Activation·Period</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_lock_delay_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-service_s | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_vsftpd_disabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·S | 77 | ······<ocil:title>Disable·vsftpd·Service</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-service_s | 79 | ········<ocil:test_action_ref>ocil:ssg-service_vsftpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_banner_enabled_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Configure·auditd·space_left·Action·on·Low·Disk·Space</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-d | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_action_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_security_opasswd_old_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 95 | ······<ocil:title>Verify·Permissions·on·/etc/security/opasswd.old·File</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_security_opasswd_old_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_cron_enabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-service_cron_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_security_opasswd_old_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 890757/902803 bytes (98.67%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1976·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1976·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12 | 3 | -rw-r--r--···0········0········0··1230332·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d31·3935·3722·3e3c·7461·626c··="idm1957"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d31·3935·3822·2074··get="#idm1958"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003e820:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003e830:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003e840:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003e850:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003e860:·2069·643d·2269·646d·3139·3537·223e·3c74···id="idm1957"><t | ||
| 0003e | 0003e870:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003e880:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003e890:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003e8a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e | 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003e | 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003ecb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ecc0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ecd0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ece0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ecf0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e | 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e | 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003e | 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003e | 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003e | 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003e | 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | ||
| 0003e | 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | ||
| 0003e | 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | ||
| 0003e | 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | ||
| 0003e | 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | ||
| 0003e | 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | ||
| 0003e | 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | ||
| 0003e | 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003e | 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | ||
| 0003e | 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | ||
| 0003e | 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0003e | 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | ||
| 0003e | 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | ||
| 0003e | 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | ||
| 0003e | 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003e | 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003e | 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | ||
| 0003e | 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | ||
| 0003e | 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | ||
| 0003e | 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | ||
| 0003e | 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | ||
| 0003e | 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | ||
| 0003e | 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | ||
| 0003e | 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | ||
| 0003e | 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | ||
| 0003e | 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | ||
| 0003e | 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | ||
| 0003e | 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | ||
| 0003e | 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | ||
| 0003e | 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | ||
| 0003e | 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | ||
| 0003e | 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | ||
| Max diff block lines reached; 1101724/1120520 bytes (98.32%) of diff not shown. | |||
| Offset 227, 35 lines modified | Offset 227, 14 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 258 | -·name:·Find·/etc/sudoers.d/·files | 239 | -·name:·Find·/etc/sudoers.d/·files |
| 259 | ··ansible.builtin.find: | 240 | ··ansible.builtin.find: |
| Offset 286, 14 lines modified | Offset 265, 35 lines modified | ||
| 286 | ··-·NIST-800-53-IA-11 | 265 | ··-·NIST-800-53-IA-11 |
| 287 | ··-·low_complexity | 266 | ··-·low_complexity |
| 288 | ··-·low_disruption | 267 | ··-·low_disruption |
| 289 | ··-·medium_severity | 268 | ··-·medium_severity |
| 290 | ··-·no_reboot_needed | 269 | ··-·no_reboot_needed |
| 291 | ··-·restrict_strategy | 270 | ··-·restrict_strategy |
| 292 | ··-·sudo_remove_no_authenticate | 271 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 297 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 35 lines modified | Offset 314, 14 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 345 | -·name:·Find·/etc/sudoers.d/·files | 326 | -·name:·Find·/etc/sudoers.d/·files |
| 346 | ··ansible.builtin.find: | 327 | ··ansible.builtin.find: |
| Offset 373, 14 lines modified | Offset 352, 35 lines modified | ||
| 373 | ··-·NIST-800-53-IA-11 | 352 | ··-·NIST-800-53-IA-11 |
| 374 | ··-·low_complexity | 353 | ··-·low_complexity |
| 375 | ··-·low_disruption | 354 | ··-·low_disruption |
| 376 | ··-·medium_severity | 355 | ··-·medium_severity |
| 377 | ··-·no_reboot_needed | 356 | ··-·no_reboot_needed |
| 378 | ··-·restrict_strategy | 357 | ··-·restrict_strategy |
| 379 | ··-·sudo_remove_nopasswd | 358 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 131317/136765 bytes (96.02%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | ||
| 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d31·3935·3722·3e3c··"·id="idm1957">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | |||
| 0003ece0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003e960:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003e970:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003e980:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003e990:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003e9a0:·7073·6522·2069·643d·2269·646d·3139·3537··pse"·id="idm1957 | ||
| 0003e | 0003e9b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e | 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003e | 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003e | 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003e | 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003e | 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003e | 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003e | 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003e | 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003e | 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003e | 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003e | 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003e | 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003e | 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003e | 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003e | 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003e | 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | ||
| 0003e | 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | ||
| 0003e | 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | ||
| 0003e | 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | ||
| 0003e | 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | ||
| 0003e | 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | ||
| 0003e | 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | ||
| 0003e | 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | ||
| 0003e | 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | ||
| 0003e | 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | ||
| 0003e | 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | ||
| 0003e | 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | ||
| 0003e | 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | ||
| 0003e | 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | ||
| 0003e | 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003e | 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003e | 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | ||
| 0003e | 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | ||
| 0003e | 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | ||
| 0003e | 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | ||
| 0003e | 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | ||
| 0003e | 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | ||
| 0003e | 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | ||
| 0003 | 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | ||
| 0003 | 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | ||
| 0003 | 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | ||
| 0003 | 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | ||
| 0003 | 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | ||
| 0003 | 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | ||
| 0003 | 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | ||
| 0003 | 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | ||
| 0003 | 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | ||
| 0003 | 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | ||
| 0003 | 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | ||
| 0003 | 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | ||
| 0003 | 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | ||
| 0003 | 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | ||
| Max diff block lines reached; 1242003/1260799 bytes (98.51%) of diff not shown. | |||
| Offset 231, 35 lines modified | Offset 231, 14 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 262 | -·name:·Find·/etc/sudoers.d/·files | 243 | -·name:·Find·/etc/sudoers.d/·files |
| 263 | ··ansible.builtin.find: | 244 | ··ansible.builtin.find: |
| Offset 290, 14 lines modified | Offset 269, 35 lines modified | ||
| 290 | ··-·NIST-800-53-IA-11 | 269 | ··-·NIST-800-53-IA-11 |
| 291 | ··-·low_complexity | 270 | ··-·low_complexity |
| 292 | ··-·low_disruption | 271 | ··-·low_disruption |
| 293 | ··-·medium_severity | 272 | ··-·medium_severity |
| 294 | ··-·no_reboot_needed | 273 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 274 | ··-·restrict_strategy |
| 296 | ··-·sudo_remove_no_authenticate | 275 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 303 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 35 lines modified | Offset 318, 14 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Find·/etc/sudoers.d/·files | 330 | -·name:·Find·/etc/sudoers.d/·files |
| 350 | ··ansible.builtin.find: | 331 | ··ansible.builtin.find: |
| Offset 377, 14 lines modified | Offset 356, 35 lines modified | ||
| 377 | ··-·NIST-800-53-IA-11 | 356 | ··-·NIST-800-53-IA-11 |
| 378 | ··-·low_complexity | 357 | ··-·low_complexity |
| 379 | ··-·low_disruption | 358 | ··-·low_disruption |
| 380 | ··-·medium_severity | 359 | ··-·medium_severity |
| 381 | ··-·no_reboot_needed | 360 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 361 | ··-·restrict_strategy |
| 383 | ··-·sudo_remove_nopasswd | 362 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 148167/153615 bytes (96.45%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d31·3935·3722··se"·id="idm1957" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039f60:·3935·3822·2074·6162·696e·6465·783d·2230··958"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039be0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039bf0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039c00:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039c10:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003 | 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | ||
| 0003 | 00039c30:·3537·223e·3c74·6162·6c65·2063·6c61·7373··57"><table·class | ||
| 0003 | 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003 | 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003 | 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003 | 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003 | 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003 | 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003 | 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003 | 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003 | 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003 | 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003 | 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003 | 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003 | 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003 | 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003 | 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | ||
| 0003 | 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | ||
| 0003 | 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003 | 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | ||
| 0003 | 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | ||
| 0003 | 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | ||
| 0003 | 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | ||
| 0003 | 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | ||
| 0003 | 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0003 | 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | ||
| 0003 | 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | ||
| 0003 | 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | ||
| 0003 | 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | ||
| 0003 | 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | ||
| 0003 | 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003 | 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003 | 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | ||
| 0003 | 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | ||
| 0003 | 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | ||
| 0003 | 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | ||
| 0003 | 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | ||
| 0003 | 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | ||
| 0003 | 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | ||
| 0003 | 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | ||
| 0003 | 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | ||
| 0003 | 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | ||
| 0003 | 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | ||
| 0003 | 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | ||
| 0003 | 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | ||
| 0003 | 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | ||
| 0003 | 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | ||
| 0003 | 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | ||
| 0003 | 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | ||
| 0003 | 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | ||
| 0003 | 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | ||
| 0003 | 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | ||
| 0003 | 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | ||
| Max diff block lines reached; 361044/379840 bytes (95.05%) of diff not shown. | |||
| Offset 91, 35 lines modified | Offset 91, 14 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Find·/etc/sudoers.d/·files | 103 | -·name:·Find·/etc/sudoers.d/·files |
| 123 | ··ansible.builtin.find: | 104 | ··ansible.builtin.find: |
| Offset 150, 14 lines modified | Offset 129, 35 lines modified | ||
| 150 | ··-·NIST-800-53-IA-11 | 129 | ··-·NIST-800-53-IA-11 |
| 151 | ··-·low_complexity | 130 | ··-·low_complexity |
| 152 | ··-·low_disruption | 131 | ··-·low_disruption |
| 153 | ··-·medium_severity | 132 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 133 | ··-·no_reboot_needed |
| 155 | ··-·restrict_strategy | 134 | ··-·restrict_strategy |
| 156 | ··-·sudo_remove_no_authenticate | 135 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 163 | ············Without·re-authentication,·users·may·access·resources·or·perform | 161 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 35 lines modified | Offset 178, 14 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 209 | -·name:·Find·/etc/sudoers.d/·files | 190 | -·name:·Find·/etc/sudoers.d/·files |
| 210 | ··ansible.builtin.find: | 191 | ··ansible.builtin.find: |
| Offset 237, 14 lines modified | Offset 216, 35 lines modified | ||
| 237 | ··-·NIST-800-53-IA-11 | 216 | ··-·NIST-800-53-IA-11 |
| 238 | ··-·low_complexity | 217 | ··-·low_complexity |
| 239 | ··-·low_disruption | 218 | ··-·low_disruption |
| 240 | ··-·medium_severity | 219 | ··-·medium_severity |
| 241 | ··-·no_reboot_needed | 220 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 221 | ··-·restrict_strategy |
| 243 | ··-·sudo_remove_nopasswd | 222 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 47216/52661 bytes (89.66%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d31·3935·3722·3e3c·7461·626c·6520·636c··m1957"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d31·3935·3822·2074·6162·696e··"#idm1958"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003e8d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003e8e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003e8f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e | 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003e | 0003e910:·2269·646d·3139·3537·223e·3c74·6162·6c65··"idm1957"><table | ||
| 0003e | 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003e | 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003e | 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003e | 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003e | 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003e | 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003e | 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003e | 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003e | 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003e | 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003e | 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003e | 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003e | 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003e | 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003e | 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003e | 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | ||
| 0003e | 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | ||
| 0003e | 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | ||
| 0003e | 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | ||
| 0003e | 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | ||
| 0003e | 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | ||
| 0003e | 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | ||
| 0003e | 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | ||
| 0003e | 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003e | 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0003e | 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | ||
| 0003e | 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 0003e | 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | ||
| 0003e | 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 0003e | 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 0003e | 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003e | 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003e | 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | ||
| 0003e | 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | ||
| 0003e | 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | ||
| 0003e | 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | ||
| 0003e | 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | ||
| 0003e | 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | ||
| 0003e | 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003e | 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | ||
| 0003e | 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | ||
| 0003e | 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | ||
| 0003e | 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | ||
| 0003e | 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | ||
| 0003e | 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | ||
| 0003e | 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | ||
| 0003e | 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | ||
| 0003e | 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | ||
| 0003 | 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | ||
| 0003 | 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | ||
| 0003 | 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | ||
| 0003 | 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | ||
| Max diff block lines reached; 1197979/1216775 bytes (98.46%) of diff not shown. | |||
| Offset 229, 35 lines modified | Offset 229, 14 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 260 | -·name:·Find·/etc/sudoers.d/·files | 241 | -·name:·Find·/etc/sudoers.d/·files |
| 261 | ··ansible.builtin.find: | 242 | ··ansible.builtin.find: |
| Offset 288, 14 lines modified | Offset 267, 35 lines modified | ||
| 288 | ··-·NIST-800-53-IA-11 | 267 | ··-·NIST-800-53-IA-11 |
| 289 | ··-·low_complexity | 268 | ··-·low_complexity |
| 290 | ··-·low_disruption | 269 | ··-·low_disruption |
| 291 | ··-·medium_severity | 270 | ··-·medium_severity |
| 292 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 293 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 294 | ··-·sudo_remove_no_authenticate | 273 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 35 lines modified | Offset 316, 14 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 347 | -·name:·Find·/etc/sudoers.d/·files | 328 | -·name:·Find·/etc/sudoers.d/·files |
| 348 | ··ansible.builtin.find: | 329 | ··ansible.builtin.find: |
| Offset 375, 14 lines modified | Offset 354, 35 lines modified | ||
| 375 | ··-·NIST-800-53-IA-11 | 354 | ··-·NIST-800-53-IA-11 |
| 376 | ··-·low_complexity | 355 | ··-·low_complexity |
| 377 | ··-·low_disruption | 356 | ··-·low_disruption |
| 378 | ··-·medium_severity | 357 | ··-·medium_severity |
| 379 | ··-·no_reboot_needed | 358 | ··-·no_reboot_needed |
| 380 | ··-·restrict_strategy | 359 | ··-·restrict_strategy |
| 381 | ··-·sudo_remove_nopasswd | 360 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 143447/148895 bytes (96.34%) of diff not shown. | |||
| Offset 16213, 777 lines modified | Offset 16213, 777 lines modified | ||
| 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | ||
| 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (763 lines added, 763 lines removed) | |
| 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003f5b0:·6f6e·20 | 0003f5b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003f5c0:·e287 | 0003f5c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003f5d0:·636c | 0003f5d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003f5e0:·6c6 | 0003f5e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003f5f0:·6964 | 0003f5f0:·6522·2069·643d·2269·646d·3530·3730·223e··e"·id="idm5070"> | ||
| 0003f600:· | 0003f600:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003f610:·6 | 0003f610:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003f620:·6 | 0003f620:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003f630:· | 0003f630:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003f640:·2 | 0003f640:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003f650:·6 | 0003f650:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003f660:· | 0003f660:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003f670:·74 | 0003f670:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003f680:·7 | 0003f680:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003f690:·6 | 0003f690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003f6a0:· | 0003f6a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003f6b0:· | 0003f6b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003f6c0:·7 | 0003f6c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003f6d0:· | 0003f6d0:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 0003f6e0:· | 0003f6e0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003f6f0:·6 | 0003f6f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003f700:·6 | 0003f700:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003f710:· | 0003f710:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003f720:· | 0003f720:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003f730:· | 0003f730:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003f740:·6 | 0003f740:·6f0a·2020·7461·6773·3a0a·2020·2d20·4e49··o.··tags:.··-·NI | ||
| 0003f750:· | 0003f750:·5354·2d38·3030·2d35·332d·4143·2d36·2831··ST-800-53-AC-6(1 | ||
| 0003f760:· | 0003f760:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003f770:· | 0003f770:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | ||
| 0003f780:· | 0003f780:·492d·4453·532d·5265·712d·3130·2e35·2e31··I-DSS-Req-10.5.1 | ||
| 0003f790:· | 0003f790:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003f7a0:· | 0003f7a0:·2d31·302e·352e·320a·2020·2d20·5043·492d··-10.5.2.··-·PCI- | ||
| 0003f7b0:·4 | 0003f7b0:·4453·5376·342d·3130·2e33·0a20·202d·2050··DSSv4-10.3.··-·P | ||
| 0003f7c0:· | 0003f7c0:·4349·2d44·5353·7634·2d31·302e·332e·320a··CI-DSSv4-10.3.2. | ||
| 0003f7d0:· | 0003f7d0:·2020·2d20·636f·6e66·6967·7572·655f·7374····-·configure_st | ||
| 0003f7e0:· | 0003f7e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | ||
| 0003f7f0:· | 0003f7f0:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | ||
| 0003f800:· | 0003f800:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003f810:· | 0003f810:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 0003f820:· | 0003f820:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 0003f830:· | 0003f830:·745f·6e65·6564·6564·0a20·202d·2072·7379··t_needed.··-·rsy | ||
| 0003f840:·6 | 0003f840:·736c·6f67·5f66·696c·6573·5f67·726f·7570··slog_files_group | ||
| 0003f850:· | 0003f850:·6f77·6e65·7273·6869·700a·0a2d·206e·616d··ownership..-·nam | ||
| 0003f860:·6 | 0003f860:·653a·2045·6e73·7572·6520·4c6f·6720·4669··e:·Ensure·Log·Fi | ||
| 0003f870:· | 0003f870:·6c65·7320·4172·6520·4f77·6e65·6420·4279··les·Are·Owned·By | ||
| 0003f880:· | 0003f880:·2041·7070·726f·7072·6961·7465·2047·726f···Appropriate·Gro | ||
| 0003f890:· | 0003f890:·7570·202d·2053·6574·2072·7379·736c·6f67··up·-·Set·rsyslog | ||
| 0003f8a0:· | 0003f8a0:·206c·6f67·6669·6c65·2063·6f6e·6669·6775···logfile·configu | ||
| 0003f8b0:· | 0003f8b0:·7261·7469·6f6e·0a20·2020·2066·6163·7473··ration.····facts | ||
| 0003f8c0:· | 0003f8c0:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003f8d0:· | 0003f8d0:·696e·2e73·6574·5f66·6163·743a·0a20·2020··in.set_fact:.··· | ||
| 0003f8e0:· | 0003f8e0:·2072·7379·736c·6f67·5f65·7463·5f63·6f6e···rsyslog_etc_con | ||
| 0003f8f0:·66 | 0003f8f0:·6669·673a·202f·6574·632f·7273·7973·6c6f··fig:·/etc/rsyslo | ||
| 0003f900:· | 0003f900:·672e·636f·6e66·0a20·2077·6865·6e3a·0a20··g.conf.··when:.· | ||
| 0003f910:· | 0003f910:·202d·2027·226c·696e·7578·2d62·6173·6522···-·'"linux-base" | ||
| 0003f920:· | 0003f920:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003f930:· | 0003f930:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | ||
| 0003f940:·2 | 0003f940:·2722·7273·7973·6c6f·6722·2069·6e20·616e··'"rsyslog"·in·an | ||
| 0003f950:· | 0003f950:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003f960:· | 0003f960:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | ||
| 0003f970:· | 0003f970:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | ||
| 0003f980:· | 0003f980:·2d36·2831·290a·2020·2d20·4e49·5354·2d38··-6(1).··-·NIST-8 | ||
| 0003f990:· | 0003f990:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0003f9a0:· | 0003f9a0:·2d20·5043·492d·4453·532d·5265·712d·3130··-·PCI-DSS-Req-10 | ||
| 0003f9b0:· | 0003f9b0:·2e35·2e31·0a20·202d·2050·4349·2d44·5353··.5.1.··-·PCI-DSS | ||
| 0003f9c0:· | 0003f9c0:·2d52·6571·2d31·302e·352e·320a·2020·2d20··-Req-10.5.2.··-· | ||
| 0003f9d0:· | 0003f9d0:·5043·492d·4453·5376·342d·3130·2e33·0a20··PCI-DSSv4-10.3.· | ||
| 0003f9e0:· | 0003f9e0:·202d·2050·4349·2d44·5353·7634·2d31·302e···-·PCI-DSSv4-10. | ||
| 0003f9f0:· | 0003f9f0:·332e·320a·2020·2d20·636f·6e66·6967·7572··3.2.··-·configur | ||
| 0003fa00:·6 | 0003fa00:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | ||
| 0003fa10:· | 0003fa10:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | ||
| 0003fa20:· | 0003fa20:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003fa30:·696 | 0003fa30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | ||
| 0003fa40:· | 0003fa40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | ||
| 0003fa50:· | 0003fa50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003fa60:· | 0003fa60:·2072·7379·736c·6f67·5f66·696c·6573·5f67···rsyslog_files_g | ||
| 0003fa70:· | 0003fa70:·726f·7570·6f77·6e65·7273·6869·700a·0a2d··roupownership..- | ||
| 0003fa80:· | 0003fa80:·206e·616d·653a·2045·6e73·7572·6520·4c6f···name:·Ensure·Lo | ||
| 0003fa90:·6 | 0003fa90:·6720·4669·6c65·7320·4172·6520·4f77·6e65··g·Files·Are·Owne | ||
| 0003faa0:·6 | 0003faa0:·6420·4279·2041·7070·726f·7072·6961·7465··d·By·Appropriate | ||
| 0003fab0:· | 0003fab0:·2047·726f·7570·202d·2047·6574·2049·6e63···Group·-·Get·Inc | ||
| 0003fac0:· | 0003fac0:·6c75·6465·436f·6e66·6967·2064·6972·6563··ludeConfig·direc | ||
| 0003fad0:· | 0003fad0:·7469·7665·0a20·2061·6e73·6962·6c65·2e62··tive.··ansible.b | ||
| 0003fae0:· | 0003fae0:·7569·6c74·696e·2e73·6865·6c6c·3a20·7c0a··uiltin.shell:·|. | ||
| 0003faf0:· | 0003faf0:·2020·2020·6772·6570·202d·6520·2724·496e······grep·-e·'$In | ||
| 0003fb00:· | 0003fb00:·636c·7564·6543·6f6e·6669·6727·207b·7b20··cludeConfig'·{{· | ||
| 0003fb10:· | 0003fb10:·7273·7973·6c6f·675f·6574·635f·636f·6e66··rsyslog_etc_conf | ||
| 0003fb20:· | 0003fb20:·6967·207d·7d20·7c20·6375·7420·2d64·2027··ig·}}·|·cut·-d·' | ||
| 0003fb30:· | 0003fb30:·2027·202d·6620·3220·7c7c·2074·7275·650a···'·-f·2·||·true. | ||
| 0003fb40:· | 0003fb40:·2020·7265·6769·7374·6572·3a20·7273·7973····register:·rsys | ||
| 0003fb50:· | 0003fb50:·6c6f·675f·6f6c·645f·696e·630a·2020·6368··log_old_inc.··ch | ||
| 0003fb60:· | 0003fb60:·616e·6765·645f·7768·656e·3a20·6661·6c73··anged_when:·fals | ||
| 0003fb70:· | 0003fb70:·650a·2020·7768·656e·3a0a·2020·2d20·2722··e.··when:.··-·'" | ||
| 0003fb80:· | 0003fb80:·6c69·6e75·782d·6261·7365·2220·696e·2061··linux-base"·in·a | ||
| 0003fb90:·6 | 0003fb90:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003fba0:· | 0003fba0:·6b61·6765·7327·0a20·202d·2027·2272·7379··kages'.··-·'"rsy | ||
| 0003fbb0:· | 0003fbb0:·736c·6f67·2220·696e·2061·6e73·6962·6c65··slog"·in·ansible | ||
| 0003fbc0:· | 0003fbc0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 0003fbd0:· | 0003fbd0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | ||
| 0003fbe0:· | 0003fbe0:·542d·3830·302d·3533·2d41·432d·3628·3129··T-800-53-AC-6(1) | ||
| 0003fbf0:· | 0003fbf0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003fc00:· | 0003fc00:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | ||
| 0003fc10:· | 0003fc10:·2d44·5353·2d52·6571·2d31·302e·352e·310a··-DSS-Req-10.5.1. | ||
| 0003fc20:· | 0003fc20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003fc30:· | 0003fc30:·3130·2e35·2e32·0a20·202d·2050·4349·2d44··10.5.2.··-·PCI-D | ||
| 0003fc40:· | 0003fc40:·5353·7634·2d31·302e·330a·2020·2d20·5043··SSv4-10.3.··-·PC | ||
| 0003fc50:· | 0003fc50:·492d·4453·5376·342d·3130·2e33·2e32·0a20··I-DSSv4-10.3.2.· | ||
| 0003fc60:· | 0003fc60:·202d·2063·6f6e·6669·6775·7265·5f73·7472···-·configure_str | ||
| 0003fc70:· | 0003fc70:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | ||
| 0003fc80:· | 0003fc80:·6d70·6c65·7869·7479·0a20·202d·206d·6564··mplexity.··-·med | ||
| 0003fc90:·6 | 0003fc90:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003fca0:· | 0003fca0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | ||
| 0003fcb0:·7 | 0003fcb0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | ||
| 0003fcc0:· | 0003fcc0:·5f6e·6565·6465·640a·2020·2d20·7273·7973··_needed.··-·rsys | ||
| 0003fcd0:· | 0003fcd0:·6c6f·675f·6669·6c65·735f·6772·6f75·706f··log_files_groupo | ||
| 0003fce0:·6572· | 0003fce0:·776e·6572·7368·6970·0a0a·2d20·6e61·6d65··wnership..-·name | ||
| 0003fcf0:· | 0003fcf0:·3a20·456e·7375·7265·204c·6f67·2046·696c··:·Ensure·Log·Fil | ||
| 0003fd00:·6 | 0003fd00:·6573·2041·7265·204f·776e·6564·2042·7920··es·Are·Owned·By· | ||
| 0003fd10:· | 0003fd10:·4170·7072·6f70·7269·6174·6520·4772·6f75··Appropriate·Grou | ||
| Max diff block lines reached; 1047475/1153349 bytes (90.82%) of diff not shown. | |||
| Offset 258, 142 lines modified | Offset 258, 14 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 133705/139356 bytes (95.94%) of diff not shown. | |||
| Offset 15037, 185 lines modified | Offset 15037, 185 lines modified | ||
| 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | ||
| 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003ac40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ac50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ac60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ac70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ac80:·3d22·6964·6d32·3638·3322·3e3c·7461·626c··="idm2683"><tabl | |||
| 0003ac90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aca0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003acb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003acc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003acd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ace0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003acf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ad00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ac40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ac50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ac60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ac70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ac80:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ac90:·3638·3322·3e3c·7072·653e·3c63·6f64·653e··683"><pre><code> | |||
| 0003aca0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003acb0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003acc0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003acd0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ace0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003acf0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ad00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ad10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ad20:·3236·3834·2220·7461·6269·6e64·6578·3d22··2684"·tabindex=" | |||
| 0003ad30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ad40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ad50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ad60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ad70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ad80:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ad90:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ada0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003adb0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003adc0:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | |||
| 0003add0:·3834·223e·3c74·6162·6c65·2063·6c61·7373··84"><table·class | |||
| 0003ade0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003adf0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a | 0003ad10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003a | 0003ad20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003ad30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ad40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ad50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ad60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ad70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ad80:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ad90:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ada0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003adb0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003adc0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003add0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ade0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003adf0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003ae00:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003ae10:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003ae20:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003ae30:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003ae40:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003ae50:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003ae60:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003ae70:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003ae80:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003ae90:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003aea0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003aeb0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003aec0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003aed0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003aee0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003aef0:·2020·7768·656e·3a20·2722·6c69·6e75·782d····when:·'"linux- | |||
| 0003af00:·6261·7365·2220·696e·2061·6e73·6962·6c65··base"·in·ansible | |||
| 0003af10:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003af20:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003af30:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003af40:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af50:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af60:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003af70:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003af80:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003af90:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003afa0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003afb0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003afc0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003afd0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003afe0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003aff0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b000:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b010:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b020:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b030:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b040:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b050:·6d32·3638·3422·2074·6162·696e·6465·783d··m2684"·tabindex= | |||
| 0003b060:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b070:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b080:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b090:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b0a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b0b0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b0c0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b0d0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b0e0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0f0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b100:·6522·2069·643d·2269·646d·3236·3834·223e··e"·id="idm2684"> | |||
| 0003b110:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b120:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b130:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b140:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b150:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b160:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b170:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b180:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b190:·6172·6765·743d·2223·6964·6d32·3638·3522··arget="#idm2685" | |||
| 0003b1a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| Max diff block lines reached; 17129413/17153591 bytes (99.86%) of diff not shown. | |||
| Offset 15042, 185 lines modified | Offset 15042, 185 lines modified | ||
| 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | ||
| 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003ac90:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003aca0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003acb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ac90:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003aca0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003acb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003acc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ace0:·3236·3833·223e·3c70·7265·3e3c·636f·6465··2683"><pre><code | |||
| 0003acf0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad00:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad10:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad20:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad30:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad40:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ad50:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ad60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ad70:·6d32·3638·3422·2074·6162·696e·6465·783d··m2684"·tabindex= | |||
| 0003ad80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ad90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ada0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003adb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003adc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003add0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003ade0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003adf0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a | 0003acc0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003ae10:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ae20:·3638·3422·3e3c·7461·626c·6520·636c·6173··684"><table·clas | |||
| 0003ae30:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae40:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ae50:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ae60:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a | 0003acd0:·643d·2269·646d·3236·3833·223e·3c74·6162··d="idm2683"><tab | ||
| 0003ace0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003acf0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad00:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad10:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad20:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad40:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad50:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a | 0003ad60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003a | 0003ad70:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003ad80:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ad90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ada0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003adb0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003adc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003add0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003ade0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003adf0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ae00:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003ae10:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae20:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003ae30:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003ae40:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003ae50:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003ae60:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003ae70:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003ae80:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003ae90:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003aea0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003aeb0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003aec0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003aed0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003aee0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003aef0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af00:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003af10:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003af20:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003af30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003af40:·0a20·2077·6865·6e3a·2027·226c·696e·7578··.··when:·'"linux | |||
| 0003af50:·2d62·6173·6522·2069·6e20·616e·7369·626c··-base"·in·ansibl | |||
| 0003af60:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003af70:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003af80:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003af90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003afa0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003afb0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003afc0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003afd0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003afe0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003aff0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b000:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b010:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b020:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b030:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b040:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b050:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b060:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b070:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b080:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b090:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b0a0:·646d·3236·3834·2220·7461·6269·6e64·6578··dm2684"·tabindex | |||
| 0003b0b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b0c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b0d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b0e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b0f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b100:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b110:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b120:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b130:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b140:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b150:·7365·2220·6964·3d22·6964·6d32·3638·3422··se"·id="idm2684" | |||
| 0003b160:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b170:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b180:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b190:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1e0:·7461·7267·6574·3d22·2369·646d·3236·3835··target="#idm2685 | |||
| 0003b1f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b200:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b210:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b220:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| Max diff block lines reached; 17322489/17346667 bytes (99.86%) of diff not shown. | |||
| Offset 15028, 185 lines modified | Offset 15028, 185 lines modified | ||
| 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | ||
| 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aba0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003aba0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003abb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003abc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003abd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003abe0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003abf0:·2269·646d·3236·3833·223e·3c74·6162·6c65··"idm2683"><table | |||
| 0003ac00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ac10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ac20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ac30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ac40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ac50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ac60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ac70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003abb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003abc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003abd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003abe0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003abf0:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | |||
| 0003ac00:·3833·223e·3c70·7265·3e3c·636f·6465·3e0a··83"><pre><code>. | |||
| 0003ac10:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ac20:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ac30:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ac40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ac50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ac60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ac70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ac80:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003ac90:·3638·3422·2074·6162·696e·6465·783d·2230··684"·tabindex="0 | |||
| 0003aca0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003acb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003acc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003acd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ace0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003acf0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ad00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ad10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ad20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ad30:·6170·7365·2220·6964·3d22·6964·6d32·3638··apse"·id="idm268 | |||
| 0003ad40:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003ad50:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ad60:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ad70:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ad80:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ad90:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003ac80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003a | 0003ac90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003aca0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003acb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003acc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003acd0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ace0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003acf0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ad00:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003ad10:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003ad20:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ad30:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003ad40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003ad50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ad60:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ad70:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ad80:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ad90:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ada0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003adb0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003adc0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003add0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003ade0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003adf0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003ae00:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003ae10:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003ae20:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003ae30:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003ae40:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003ae50:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003ae60:·2077·6865·6e3a·2027·226c·696e·7578·2d62···when:·'"linux-b | |||
| 0003ae70:·6173·6522·2069·6e20·616e·7369·626c·655f··ase"·in·ansible_ | |||
| 0003ae80:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003ae90:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003aea0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003aeb0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003aec0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003aed0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003aee0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003aef0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af00:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af10:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003af20:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003af30:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003af40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003af50:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003af60:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003af70:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003af80:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003af90:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003afa0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003afb0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003afc0:·3236·3834·2220·7461·6269·6e64·6578·3d22··2684"·tabindex=" | |||
| 0003afd0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003afe0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003aff0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b000:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b010:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b020:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b030:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b040:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b050:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b060:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b070:·2220·6964·3d22·6964·6d32·3638·3422·3e3c··"·id="idm2684">< | |||
| 0003b080:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b090:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0a0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b0b0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b0c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b0d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b0e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b0f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b100:·7267·6574·3d22·2369·646d·3236·3835·2220··rget="#idm2685"· | |||
| 0003b110:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b120:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| Max diff block lines reached; 6467319/6491497 bytes (99.63%) of diff not shown. | |||
| Offset 111, 45 lines modified | Offset 111, 14 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | include·install_aide | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | } | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 140 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 141 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 151 | ··package_facts: | 124 | ··package_facts: |
| Offset 178, 14 lines modified | Offset 147, 45 lines modified | ||
| 178 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 179 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 180 | ··-·low_complexity | 149 | ··-·low_complexity |
| 181 | ··-·low_disruption | 150 | ··-·low_disruption |
| 182 | ··-·medium_severity | 151 | ··-·medium_severity |
| 183 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 184 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 165 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 166 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_aide | ||
| 176 | class·install_aide·{ | ||
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 186 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 187 | $·sudo·aideinit | 183 | $·sudo·aideinit |
| 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 189 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 190 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 191 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 41 lines modified | Offset 209, 14 lines modified | ||
| 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 219 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 220 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 221 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 222 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 223 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 224 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 225 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 226 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 227 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 228 | fi | ||
| 229 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 230 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 231 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 232 | fi | ||
| 233 | /usr/sbin/aideinit·-y·-f | ||
| 234 | else | ||
| 235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 236 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 888895/894127 bytes (99.41%) of diff not shown. | |||
| Offset 15543, 417 lines modified | Offset 15543, 417 lines modified | ||
| 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | ||
| 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (403 lines added, 403 lines removed) | |
| 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003cbd0:·6961·7469·6f6e·20 | 0003cbd0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003cbe0:·6970·7420 | 0003cbe0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003cbf0:·6469 | 0003cbf0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003cc00:· | 0003cc00:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003cc10:·7365 | 0003cc10:·6c61·7073·6522·2069·643d·2269·646d·3436··lapse"·id="idm46 | ||
| 0003cc20:·3 | 0003cc20:·3235·223e·3c74·6162·6c65·2063·6c61·7373··25"><table·class | ||
| 0003cc30:· | 0003cc30:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003cc40:· | 0003cc40:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003cc50:·6 | 0003cc50:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003cc60:· | 0003cc60:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003cc70:· | 0003cc70:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003cc80:·6 | 0003cc80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003cc90:· | 0003cc90:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003cca0:· | 0003cca0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003ccb0:· | 0003ccb0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003ccc0:· | 0003ccc0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003ccd0:· | 0003ccd0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003cce0:·7 | 0003cce0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003ccf0:· | 0003ccf0:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | ||
| 0003cd00:· | 0003cd00:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | ||
| 0003cd10:· | 0003cd10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003cd20:· | 0003cd20:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003cd30:· | 0003cd30:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003cd40:· | 0003cd40:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003cd50:· | 0003cd50:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003cd60:· | 0003cd60:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003cd70:· | 0003cd70:·2d20·434a·4953·2d35·2e36·2e32·2e31·2e31··-·CJIS-5.6.2.1.1 | ||
| 0003cd80:· | 0003cd80:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003cd90:· | 0003cd90:·312d·332e·352e·380a·2020·2d20·4e49·5354··1-3.5.8.··-·NIST | ||
| 0003cda0:· | 0003cda0:·2d38·3030·2d35·332d·4941·2d35·2831·2928··-800-53-IA-5(1)( | ||
| 0003cdb0:· | 0003cdb0:·6529·0a20·202d·204e·4953·542d·3830·302d··e).··-·NIST-800- | ||
| 0003cdc0:·5 | 0003cdc0:·3533·2d49·412d·3528·6629·0a20·202d·2050··53-IA-5(f).··-·P | ||
| 0003cdd0:· | 0003cdd0:·4349·2d44·5353·2d52·6571·2d38·2e32·2e35··CI-DSS-Req-8.2.5 | ||
| 0003cde0:· | 0003cde0:·0a20·202d·2050·4349·2d44·5353·7634·2d38··.··-·PCI-DSSv4-8 | ||
| 0003cdf0:· | 0003cdf0:·2e33·0a20·202d·2050·4349·2d44·5353·7634··.3.··-·PCI-DSSv4 | ||
| 0003ce00:· | 0003ce00:·2d38·2e33·2e37·0a20·202d·2061·6363·6f75··-8.3.7.··-·accou | ||
| 0003ce10:· | 0003ce10:·6e74·735f·7061·7373·776f·7264·5f70·616d··nts_password_pam | ||
| 0003ce20:· | 0003ce20:·5f75·6e69·785f·7265·6d65·6d62·6572·0a20··_unix_remember.· | ||
| 0003ce30:·20 | 0003ce30:·202d·2063·6f6e·6669·6775·7265·5f73·7472···-·configure_str | ||
| 0003ce40:· | 0003ce40:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | ||
| 0003ce50:·6 | 0003ce50:·6d70·6c65·7869·7479·0a20·202d·206d·6564··mplexity.··-·med | ||
| 0003ce60:· | 0003ce60:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003ce70:· | 0003ce70:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | ||
| 0003ce80:· | 0003ce80:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | ||
| 0003ce90:· | 0003ce90:·5f6e·6565·6465·640a·2d20·6e61·6d65·3a20··_needed.-·name:· | ||
| 0003cea0:· | 0003cea0:·5843·4344·4620·5661·6c75·6520·7661·725f··XCCDF·Value·var_ | ||
| 0003ceb0:· | 0003ceb0:·7061·7373·776f·7264·5f70·616d·5f75·6e69··password_pam_uni | ||
| 0003cec0:· | 0003cec0:·785f·7265·6d65·6d62·6572·2023·2070·726f··x_remember·#·pro | ||
| 0003ced0:· | 0003ced0:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | ||
| 0003cee0:· | 0003cee0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003cef0:· | 0003cef0:·2076·6172·5f70·6173·7377·6f72·645f·7061···var_password_pa | ||
| 0003cf00:· | 0003cf00:·6d5f·756e·6978·5f72·656d·656d·6265·723a··m_unix_remember: | ||
| 0003cf10:·20 | 0003cf10:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | ||
| 0003cf20:·6 | 0003cf20:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | ||
| 0003cf30:· | 0003cf30:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | ||
| 0003cf40:· | 0003cf40:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 0003cf50:· | 0003cf50:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | ||
| 0003cf60:· | 0003cf60:·655f·7661·725f·7061·7373·776f·7264·5f70··e_var_password_p | ||
| 0003cf70:·6 | 0003cf70:·616d·5f75·6e69·785f·7265·6d65·6d62·6572··am_unix_remember | ||
| 0003cf80:· | 0003cf80:·223e·323c·2f61·6262·723e·0a20·2074·6167··">2</abbr>.··tag | ||
| 0003cf90:· | 0003cf90:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | ||
| 0003cfa0:· | 0003cfa0:·0a2d·206e·616d·653a·204c·696d·6974·2050··.-·name:·Limit·P | ||
| 0003cfb0:·6 | 0003cfb0:·6173·7377·6f72·6420·5265·7573·6520·2d20··assword·Reuse·-· | ||
| 0003cfc0:· | 0003cfc0:·4368·6563·6b20·6966·2074·6865·2072·6571··Check·if·the·req | ||
| 0003cfd0:· | 0003cfd0:·7569·7265·6420·5041·4d20·6d6f·6475·6c65··uired·PAM·module | ||
| 0003cfe0:· | 0003cfe0:·206f·7074·696f·6e20·6973·2070·7265·7365···option·is·prese | ||
| 0003cff0:·6 | 0003cff0:·6e74·0a20·2020·2069·6e20·2f65·7463·2f70··nt.····in·/etc/p | ||
| 0003d000:· | 0003d000:·616d·2e64·2f63·6f6d·6d6f·6e2d·7061·7373··am.d/common-pass | ||
| 0003d010:· | 0003d010:·776f·7264·0a20·2061·6e73·6962·6c65·2e62··word.··ansible.b | ||
| 0003d020:· | 0003d020:·7569·6c74·696e·2e6c·696e·6569·6e66·696c··uiltin.lineinfil | ||
| 0003d030:· | 0003d030:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | ||
| 0003d040:·206 | 0003d040:·632f·7061·6d2e·642f·636f·6d6d·6f6e·2d70··c/pam.d/common-p | ||
| 0003d050:· | 0003d050:·6173·7377·6f72·640a·2020·2020·7265·6765··assword.····rege | ||
| 0003d060:· | 0003d060:·7870·3a20·5e5c·732a·7061·7373·776f·7264··xp:·^\s*password | ||
| 0003d070:·5c73·2b | 0003d070:·5c73·2b5c·5b73·7563·6365·7373·3d5b·412d··\s+\[success=[A- | ||
| 0003d080:· | 0003d080:·5a61·2d7a·302d·395d·2e2a·5c5d·5c73·2b70··Za-z0-9].*\]\s+p | ||
| 0003d090:· | 0003d090:·616d·5f75·6e69·782e·736f·5c73·2a2e·2a5c··am_unix.so\s*.*\ | ||
| 0003d0a0:· | 0003d0a0:·7372·656d·656d·6265·725c·620a·2020·2020··sremember\b.···· | ||
| 0003d0b0:· | 0003d0b0:·7374·6174·653a·2061·6273·656e·740a·2020··state:·absent.·· | ||
| 0003d0c0:·6 | 0003d0c0:·6368·6563·6b5f·6d6f·6465·3a20·7472·7565··check_mode:·true | ||
| 0003d0d0:· | 0003d0d0:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | ||
| 0003d0e0:·20 | 0003d0e0:·2066·616c·7365·0a20·2072·6567·6973·7465···false.··registe | ||
| 0003d0f0:·7 | 0003d0f0:·723a·2072·6573·756c·745f·7061·6d5f·6d6f··r:·result_pam_mo | ||
| 0003d100:· | 0003d100:·6475·6c65·5f72·656d·656d·6265·725f·6f70··dule_remember_op | ||
| 0003d110:·7 | 0003d110:·7469·6f6e·5f70·7265·7365·6e74·0a20·2077··tion_present.··w | ||
| 0003d120:·5 | 0003d120:·6865·6e3a·2027·226c·6962·7061·6d2d·7275··hen:·'"libpam-ru | ||
| 0003d130:· | 0003d130:·6e74·696d·6522·2069·6e20·616e·7369·626c··ntime"·in·ansibl | ||
| 0003d140:· | 0003d140:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003d150:· | 0003d150:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | ||
| 0003d160:· | 0003d160:·4953·2d35·2e36·2e32·2e31·2e31·0a20·202d··IS-5.6.2.1.1.··- | ||
| 0003d170:· | 0003d170:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003d180:· | 0003d180:·352e·380a·2020·2d20·4e49·5354·2d38·3030··5.8.··-·NIST-800 | ||
| 0003d190:· | 0003d190:·2d35·332d·4941·2d35·2831·2928·6529·0a20··-53-IA-5(1)(e).· | ||
| 0003d1a0:· | 0003d1a0:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | ||
| 0003d1b0:· | 0003d1b0:·412d·3528·6629·0a20·202d·2050·4349·2d44··A-5(f).··-·PCI-D | ||
| 0003d1c0:· | 0003d1c0:·5353·2d52·6571·2d38·2e32·2e35·0a20·202d··SS-Req-8.2.5.··- | ||
| 0003d1d0:· | 0003d1d0:·2050·4349·2d44·5353·7634·2d38·2e33·0a20···PCI-DSSv4-8.3.· | ||
| 0003d1e0:· | 0003d1e0:·202d·2050·4349·2d44·5353·7634·2d38·2e33···-·PCI-DSSv4-8.3 | ||
| 0003d1f0:· | 0003d1f0:·2e37·0a20·202d·2061·6363·6f75·6e74·735f··.7.··-·accounts_ | ||
| 0003d200:· | 0003d200:·7061·7373·776f·7264·5f70·616d·5f75·6e69··password_pam_uni | ||
| 0003d210:·7 | 0003d210:·785f·7265·6d65·6d62·6572·0a20·202d·2063··x_remember.··-·c | ||
| 0003d220:· | 0003d220:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | ||
| 0003d230:· | 0003d230:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | ||
| 0003d240:· | 0003d240:·7869·7479·0a20·202d·206d·6564·6975·6d5f··xity.··-·medium_ | ||
| 0003d250:· | 0003d250:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | ||
| 0003d260:·6 | 0003d260:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | ||
| 0003d270:· | 0003d270:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003d280:· | 0003d280:·6465·640a·0a2d·206e·616d·653a·204c·696d··ded..-·name:·Lim | ||
| 0003d290:· | 0003d290:·6974·2050·6173·7377·6f72·6420·5265·7573··it·Password·Reus | ||
| 0003d2a0:· | 0003d2a0:·6520·2d20·456e·7375·7265·2074·6865·2022··e·-·Ensure·the·" | ||
| 0003d2b0:· | 0003d2b0:·7265·6d65·6d62·6572·2220·5041·4d20·6f70··remember"·PAM·op | ||
| 0003d2c0:· | 0003d2c0:·7469·6f6e·2066·6f72·2022·7061·6d5f·756e··tion·for·"pam_un | ||
| 0003d2d0:· | 0003d2d0:·6978·2e73·6f22·0a20·2020·2069·7320·696e··ix.so".····is·in | ||
| 0003d2e0:· | 0003d2e0:·636c·7564·6564·2069·6e20·2f65·7463·2f70··cluded·in·/etc/p | ||
| 0003d2f0:· | 0003d2f0:·616d·2e64·2f63·6f6d·6d6f·6e2d·7061·7373··am.d/common-pass | ||
| 0003d300:· | 0003d300:·776f·7264·0a20·2061·6e73·6962·6c65·2e62··word.··ansible.b | ||
| 0003d310:· | 0003d310:·7569·6c74·696e·2e6c·696e·6569·6e66·696c··uiltin.lineinfil | ||
| 0003d320:· | 0003d320:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | ||
| 0003d330:· | 0003d330:·632f·7061·6d2e·642f·636f·6d6d·6f6e·2d70··c/pam.d/common-p | ||
| Max diff block lines reached; 535780/591974 bytes (90.51%) of diff not shown. | |||
| Offset 177, 76 lines modified | Offset 177, 14 lines modified | ||
| 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) | 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) |
| 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 | 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 |
| 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 | 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 |
| 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 | 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 |
| 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 | 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 187 | grep·-q·'^installed';·then | ||
| 188 | var_password_pam_unix_remember='2' | ||
| 189 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 190 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 191 | defaultValue="$var_password_pam_unix_remember" | ||
| 192 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 193 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 194 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 195 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 196 | ····#·fix·'type'·if·it's·wrong | ||
| 197 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 198 | etc/pam.d/common-password"·;·then | ||
| 199 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 200 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 201 | ····fi | ||
| 202 | ····#·fix·'control'·if·it's·wrong | ||
| 203 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 204 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 205 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 206 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 207 | ····fi | ||
| 208 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 209 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 210 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 211 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 212 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 213 | pam.d/common-password" | ||
| 214 | ····#·add·'option=default'·if·option·is·not·set | ||
| 215 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 216 | pam.d/common-password"·&& | ||
| 217 | ············grep····-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 218 | pam.d/common-password"·|·grep·-q·-E·-v·"\\sremember(=|\\s|\$)"·;·then | ||
| 219 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 220 | ]].*\]\\s+pam_unix.so[^\\n]*)/\\1·remember${defaultValue}/"·"/etc/pam.d/common-password" | ||
| 221 | ····#·add·a·new·entry·if·none·exists | ||
| 222 | ····elif·!·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 223 | (\\s.+)?\\s+remember${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-password"·;·then | ||
| 224 | ········echo·"password·\[success=[[:alnum:]].*\]·pam_unix.so·remember${defaultValue}"·>>·"/ | ||
| 225 | etc/pam.d/common-password" | ||
| 226 | ····fi | ||
| 227 | else | ||
| 228 | ····echo·"/etc/pam.d/common-password·doesn't·exist"·>&2 | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 238 | -·name:·Gather·the·package·facts | 189 | -·name:·Gather·the·package·facts |
| 239 | ··package_facts: | 190 | ··package_facts: |
| Offset 345, 14 lines modified | Offset 283, 76 lines modified | ||
| 345 | ··-·PCI-DSSv4-8.3.7 | 283 | ··-·PCI-DSSv4-8.3.7 |
| 346 | ··-·accounts_password_pam_unix_remember | 284 | ··-·accounts_password_pam_unix_remember |
| 347 | ··-·configure_strategy | 285 | ··-·configure_strategy |
| 348 | ··-·low_complexity | 286 | ··-·low_complexity |
| 349 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 350 | ··-·medium_severity | 288 | ··-·medium_severity |
| 351 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 293 | grep·-q·'^installed';·then | ||
| 294 | var_password_pam_unix_remember='2' | ||
| 295 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 296 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 297 | defaultValue="$var_password_pam_unix_remember" | ||
| 298 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 299 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 300 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 301 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 302 | ····#·fix·'type'·if·it's·wrong | ||
| 303 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 304 | etc/pam.d/common-password"·;·then | ||
| 305 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 306 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 307 | ····fi | ||
| 308 | ····#·fix·'control'·if·it's·wrong | ||
| 309 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 310 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 311 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 312 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 313 | ····fi | ||
| 314 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 315 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 316 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 317 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 318 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 319 | pam.d/common-password" | ||
| 320 | ····#·add·'option=default'·if·option·is·not·set | ||
| 321 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| Max diff block lines reached; 89148/95771 bytes (93.08%) of diff not shown. | |||
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d34·3033·3122·3e3c·7461·626c··="idm4031"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d34·3033·3222·2074··get="#idm4032"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003e820:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003e830:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003e840:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003e850:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003e860:·2069·643d·2269·646d·3430·3331·223e·3c74···id="idm4031"><t | ||
| 0003e | 0003e870:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003e880:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003e890:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003e8a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e | 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003e | 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003ecb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ecc0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ecd0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ece0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ecf0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e | 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e | 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003e | 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003e | 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003e | 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003e | 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | ||
| 0003e | 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | ||
| 0003e | 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | ||
| 0003e | 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | ||
| 0003e | 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | ||
| 0003e | 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | ||
| 0003e | 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | ||
| 0003e | 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003e | 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | ||
| 0003e | 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | ||
| 0003e | 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0003e | 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | ||
| 0003e | 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | ||
| 0003e | 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | ||
| 0003e | 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003e | 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003e | 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | ||
| 0003e | 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | ||
| 0003e | 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | ||
| 0003e | 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | ||
| 0003e | 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | ||
| 0003e | 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | ||
| 0003e | 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | ||
| 0003e | 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | ||
| 0003e | 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | ||
| 0003e | 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | ||
| 0003e | 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | ||
| 0003e | 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | ||
| 0003e | 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | ||
| 0003e | 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | ||
| 0003e | 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | ||
| 0003e | 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | ||
| Max diff block lines reached; 1103380/1122176 bytes (98.33%) of diff not shown. | |||
| Offset 227, 35 lines modified | Offset 227, 14 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 258 | -·name:·Find·/etc/sudoers.d/·files | 239 | -·name:·Find·/etc/sudoers.d/·files |
| 259 | ··ansible.builtin.find: | 240 | ··ansible.builtin.find: |
| Offset 286, 14 lines modified | Offset 265, 35 lines modified | ||
| 286 | ··-·NIST-800-53-IA-11 | 265 | ··-·NIST-800-53-IA-11 |
| 287 | ··-·low_complexity | 266 | ··-·low_complexity |
| 288 | ··-·low_disruption | 267 | ··-·low_disruption |
| 289 | ··-·medium_severity | 268 | ··-·medium_severity |
| 290 | ··-·no_reboot_needed | 269 | ··-·no_reboot_needed |
| 291 | ··-·restrict_strategy | 270 | ··-·restrict_strategy |
| 292 | ··-·sudo_remove_no_authenticate | 271 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 297 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 35 lines modified | Offset 314, 14 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 345 | -·name:·Find·/etc/sudoers.d/·files | 326 | -·name:·Find·/etc/sudoers.d/·files |
| 346 | ··ansible.builtin.find: | 327 | ··ansible.builtin.find: |
| Offset 373, 14 lines modified | Offset 352, 35 lines modified | ||
| 373 | ··-·NIST-800-53-IA-11 | 352 | ··-·NIST-800-53-IA-11 |
| 374 | ··-·low_complexity | 353 | ··-·low_complexity |
| 375 | ··-·low_disruption | 354 | ··-·low_disruption |
| 376 | ··-·medium_severity | 355 | ··-·medium_severity |
| 377 | ··-·no_reboot_needed | 356 | ··-·no_reboot_needed |
| 378 | ··-·restrict_strategy | 357 | ··-·restrict_strategy |
| 379 | ··-·sudo_remove_nopasswd | 358 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 131317/136765 bytes (96.02%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | ||
| 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d34·3033·3122·3e3c··"·id="idm4031">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | |||
| 0003ece0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003e960:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003e970:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003e980:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003e990:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003e9a0:·7073·6522·2069·643d·2269·646d·3430·3331··pse"·id="idm4031 | ||
| 0003e | 0003e9b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e | 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003e | 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003e | 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003e | 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003e | 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003e | 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003e | 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003e | 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003e | 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003e | 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003e | 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003e | 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003e | 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003e | 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003e | 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003e | 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | ||
| 0003e | 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | ||
| 0003e | 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | ||
| 0003e | 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | ||
| 0003e | 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | ||
| 0003e | 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | ||
| 0003e | 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | ||
| 0003e | 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | ||
| 0003e | 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | ||
| 0003e | 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | ||
| 0003e | 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | ||
| 0003e | 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | ||
| 0003e | 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | ||
| 0003e | 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | ||
| 0003e | 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003e | 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003e | 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | ||
| 0003e | 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | ||
| 0003e | 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | ||
| 0003e | 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | ||
| 0003e | 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | ||
| 0003e | 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | ||
| 0003e | 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | ||
| 0003 | 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | ||
| 0003 | 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | ||
| 0003 | 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | ||
| 0003 | 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | ||
| 0003 | 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | ||
| 0003 | 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | ||
| 0003 | 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | ||
| 0003 | 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | ||
| 0003 | 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | ||
| 0003 | 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | ||
| 0003 | 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | ||
| 0003 | 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | ||
| 0003 | 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | ||
| 0003 | 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | ||
| Max diff block lines reached; 1242443/1261239 bytes (98.51%) of diff not shown. | |||
| Offset 231, 35 lines modified | Offset 231, 14 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 262 | -·name:·Find·/etc/sudoers.d/·files | 243 | -·name:·Find·/etc/sudoers.d/·files |
| 263 | ··ansible.builtin.find: | 244 | ··ansible.builtin.find: |
| Offset 290, 14 lines modified | Offset 269, 35 lines modified | ||
| 290 | ··-·NIST-800-53-IA-11 | 269 | ··-·NIST-800-53-IA-11 |
| 291 | ··-·low_complexity | 270 | ··-·low_complexity |
| 292 | ··-·low_disruption | 271 | ··-·low_disruption |
| 293 | ··-·medium_severity | 272 | ··-·medium_severity |
| 294 | ··-·no_reboot_needed | 273 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 274 | ··-·restrict_strategy |
| 296 | ··-·sudo_remove_no_authenticate | 275 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 303 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 35 lines modified | Offset 318, 14 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Find·/etc/sudoers.d/·files | 330 | -·name:·Find·/etc/sudoers.d/·files |
| 350 | ··ansible.builtin.find: | 331 | ··ansible.builtin.find: |
| Offset 377, 14 lines modified | Offset 356, 35 lines modified | ||
| 377 | ··-·NIST-800-53-IA-11 | 356 | ··-·NIST-800-53-IA-11 |
| 378 | ··-·low_complexity | 357 | ··-·low_complexity |
| 379 | ··-·low_disruption | 358 | ··-·low_disruption |
| 380 | ··-·medium_severity | 359 | ··-·medium_severity |
| 381 | ··-·no_reboot_needed | 360 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 361 | ··-·restrict_strategy |
| 383 | ··-·sudo_remove_nopasswd | 362 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 148167/153615 bytes (96.45%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d34·3033·3122··se"·id="idm4031" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 00039f60:·3033·3222·2074·6162·696e·6465·783d·2230··032"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039be0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039bf0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039c00:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039c10:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003 | 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | ||
| 0003 | 00039c30:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | ||
| 0003 | 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003 | 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003 | 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003 | 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003 | 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003 | 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003 | 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003 | 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003 | 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003 | 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003 | 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003 | 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003 | 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003 | 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003 | 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | ||
| 0003 | 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | ||
| 0003 | 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003 | 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | ||
| 0003 | 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | ||
| 0003 | 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | ||
| 0003 | 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | ||
| 0003 | 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | ||
| 0003 | 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0003 | 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | ||
| 0003 | 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | ||
| 0003 | 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | ||
| 0003 | 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | ||
| 0003 | 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | ||
| 0003 | 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003 | 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003 | 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | ||
| 0003 | 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | ||
| 0003 | 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | ||
| 0003 | 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | ||
| 0003 | 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | ||
| 0003 | 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | ||
| 0003 | 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | ||
| 0003 | 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | ||
| 0003 | 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | ||
| 0003 | 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | ||
| 0003 | 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | ||
| 0003 | 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | ||
| 0003 | 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | ||
| 0003 | 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | ||
| 0003 | 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | ||
| 0003 | 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | ||
| 0003 | 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | ||
| 0003 | 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | ||
| 0003 | 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | ||
| 0003 | 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | ||
| 0003 | 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | ||
| Max diff block lines reached; 361872/380668 bytes (95.06%) of diff not shown. | |||
| Offset 91, 35 lines modified | Offset 91, 14 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Find·/etc/sudoers.d/·files | 103 | -·name:·Find·/etc/sudoers.d/·files |
| 123 | ··ansible.builtin.find: | 104 | ··ansible.builtin.find: |
| Offset 150, 14 lines modified | Offset 129, 35 lines modified | ||
| 150 | ··-·NIST-800-53-IA-11 | 129 | ··-·NIST-800-53-IA-11 |
| 151 | ··-·low_complexity | 130 | ··-·low_complexity |
| 152 | ··-·low_disruption | 131 | ··-·low_disruption |
| 153 | ··-·medium_severity | 132 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 133 | ··-·no_reboot_needed |
| 155 | ··-·restrict_strategy | 134 | ··-·restrict_strategy |
| 156 | ··-·sudo_remove_no_authenticate | 135 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 163 | ············Without·re-authentication,·users·may·access·resources·or·perform | 161 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 35 lines modified | Offset 178, 14 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 209 | -·name:·Find·/etc/sudoers.d/·files | 190 | -·name:·Find·/etc/sudoers.d/·files |
| 210 | ··ansible.builtin.find: | 191 | ··ansible.builtin.find: |
| Offset 237, 14 lines modified | Offset 216, 35 lines modified | ||
| 237 | ··-·NIST-800-53-IA-11 | 216 | ··-·NIST-800-53-IA-11 |
| 238 | ··-·low_complexity | 217 | ··-·low_complexity |
| 239 | ··-·low_disruption | 218 | ··-·low_disruption |
| 240 | ··-·medium_severity | 219 | ··-·medium_severity |
| 241 | ··-·no_reboot_needed | 220 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 221 | ··-·restrict_strategy |
| 243 | ··-·sudo_remove_nopasswd | 222 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 47216/52661 bytes (89.66%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d34·3033·3122·3e3c·7461·626c·6520·636c··m4031"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d34·3033·3222·2074·6162·696e··"#idm4032"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003e8d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003e8e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003e8f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e | 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003e | 0003e910:·2269·646d·3430·3331·223e·3c74·6162·6c65··"idm4031"><table | ||
| 0003e | 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003e | 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003e | 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003e | 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003e | 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003e | 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003e | 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003e | 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003e | 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003e | 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003e | 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003e | 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003e | 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003e | 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003e | 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003e | 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | ||
| 0003e | 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | ||
| 0003e | 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | ||
| 0003e | 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | ||
| 0003e | 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | ||
| 0003e | 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | ||
| 0003e | 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | ||
| 0003e | 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | ||
| 0003e | 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003e | 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0003e | 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | ||
| 0003e | 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 0003e | 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | ||
| 0003e | 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 0003e | 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 0003e | 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003e | 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003e | 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | ||
| 0003e | 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | ||
| 0003e | 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | ||
| 0003e | 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | ||
| 0003e | 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | ||
| 0003e | 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | ||
| 0003e | 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | ||
| 0003e | 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | ||
| 0003e | 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | ||
| 0003e | 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | ||
| 0003e | 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | ||
| 0003e | 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | ||
| 0003e | 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | ||
| 0003e | 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | ||
| 0003e | 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | ||
| 0003e | 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | ||
| 0003 | 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | ||
| 0003 | 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | ||
| 0003 | 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | ||
| 0003 | 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | ||
| Max diff block lines reached; 1199083/1217879 bytes (98.46%) of diff not shown. | |||
| Offset 229, 35 lines modified | Offset 229, 14 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 260 | -·name:·Find·/etc/sudoers.d/·files | 241 | -·name:·Find·/etc/sudoers.d/·files |
| 261 | ··ansible.builtin.find: | 242 | ··ansible.builtin.find: |
| Offset 288, 14 lines modified | Offset 267, 35 lines modified | ||
| 288 | ··-·NIST-800-53-IA-11 | 267 | ··-·NIST-800-53-IA-11 |
| 289 | ··-·low_complexity | 268 | ··-·low_complexity |
| 290 | ··-·low_disruption | 269 | ··-·low_disruption |
| 291 | ··-·medium_severity | 270 | ··-·medium_severity |
| 292 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 293 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 294 | ··-·sudo_remove_no_authenticate | 273 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 35 lines modified | Offset 316, 14 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 347 | -·name:·Find·/etc/sudoers.d/·files | 328 | -·name:·Find·/etc/sudoers.d/·files |
| 348 | ··ansible.builtin.find: | 329 | ··ansible.builtin.find: |
| Offset 375, 14 lines modified | Offset 354, 35 lines modified | ||
| 375 | ··-·NIST-800-53-IA-11 | 354 | ··-·NIST-800-53-IA-11 |
| 376 | ··-·low_complexity | 355 | ··-·low_complexity |
| 377 | ··-·low_disruption | 356 | ··-·low_disruption |
| 378 | ··-·medium_severity | 357 | ··-·medium_severity |
| 379 | ··-·no_reboot_needed | 358 | ··-·no_reboot_needed |
| 380 | ··-·restrict_strategy | 359 | ··-·restrict_strategy |
| 381 | ··-·sudo_remove_nopasswd | 360 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 143447/148895 bytes (96.34%) of diff not shown. | |||
| Offset 16213, 778 lines modified | Offset 16213, 778 lines modified | ||
| 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | ||
| 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (764 lines added, 764 lines removed) | |
| 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003f5b0:·7469·6f6e·20 | 0003f5b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003f5c0:·7420 | 0003f5c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003f5d0:·7620 | 0003f5d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003f5e0:·6 | 0003f5e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003f5f0:·2220 | 0003f5f0:·7073·6522·2069·643d·2269·646d·3130·3334··pse"·id="idm1034 | ||
| 0003f600:·3 | 0003f600:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003f610:· | 0003f610:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003f620:·69 | 0003f620:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003f630:·65 | 0003f630:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003f640:· | 0003f640:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003f650:· | 0003f650:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003f660:· | 0003f660:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003f670:· | 0003f670:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003f680:· | 0003f680:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003f690:· | 0003f690:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003f6a0:· | 0003f6a0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003f6b0:· | 0003f6b0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003f6c0:· | 0003f6c0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003f6d0:·7 | 0003f6d0:·793a·3c2f·7468·3e3c·7464·3e63·6f6e·6669··y:</th><td>confi | ||
| 0003f6e0:· | 0003f6e0:·6775·7265·3c2f·7464·3e3c·2f74·723e·3c2f··gure</td></tr></ | ||
| 0003f6f0:·7 | 0003f6f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003f700:· | 0003f700:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003f710:· | 0003f710:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003f720:· | 0003f720:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003f730:· | 0003f730:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003f740:·6 | 0003f740:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003f750:·20 | 0003f750:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | ||
| 0003f760:· | 0003f760:·3628·3129·0a20·202d·204e·4953·542d·3830··6(1).··-·NIST-80 | ||
| 0003f770:· | 0003f770:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | ||
| 0003f780:· | 0003f780:·2050·4349·2d44·5353·2d52·6571·2d31·302e···PCI-DSS-Req-10. | ||
| 0003f790:·2 | 0003f790:·352e·310a·2020·2d20·5043·492d·4453·532d··5.1.··-·PCI-DSS- | ||
| 0003f7a0:· | 0003f7a0:·5265·712d·3130·2e35·2e32·0a20·202d·2050··Req-10.5.2.··-·P | ||
| 0003f7b0:·43 | 0003f7b0:·4349·2d44·5353·7634·2d31·302e·330a·2020··CI-DSSv4-10.3.·· | ||
| 0003f7c0:· | 0003f7c0:·2d20·5043·492d·4453·5376·342d·3130·2e33··-·PCI-DSSv4-10.3 | ||
| 0003f7d0:·2 | 0003f7d0:·2e32·0a20·202d·2063·6f6e·6669·6775·7265··.2.··-·configure | ||
| 0003f7e0:· | 0003f7e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003f7f0:·7 | 0003f7f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 0003f800:· | 0003f800:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003f810:·6 | 0003f810:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | ||
| 0003f820:· | 0003f820:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | ||
| 0003f830:·6 | 0003f830:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003f840:·72 | 0003f840:·7273·7973·6c6f·675f·6669·6c65·735f·6772··rsyslog_files_gr | ||
| 0003f850:· | 0003f850:·6f75·706f·776e·6572·7368·6970·0a0a·2d20··oupownership..-· | ||
| 0003f860:·6 | 0003f860:·6e61·6d65·3a20·456e·7375·7265·204c·6f67··name:·Ensure·Log | ||
| 0003f870:· | 0003f870:·2046·696c·6573·2041·7265·204f·776e·6564···Files·Are·Owned | ||
| 0003f880:· | 0003f880:·2042·7920·4170·7072·6f70·7269·6174·6520···By·Appropriate· | ||
| 0003f890:·4 | 0003f890:·4772·6f75·7020·2d20·5365·7420·7273·7973··Group·-·Set·rsys | ||
| 0003f8a0:· | 0003f8a0:·6c6f·6720·6c6f·6766·696c·6520·636f·6e66··log·logfile·conf | ||
| 0003f8b0:·6 | 0003f8b0:·6967·7572·6174·696f·6e0a·2020·2020·6661··iguration.····fa | ||
| 0003f8c0:· | 0003f8c0:·6374·730a·2020·616e·7369·626c·652e·6275··cts.··ansible.bu | ||
| 0003f8d0:· | 0003f8d0:·696c·7469·6e2e·7365·745f·6661·6374·3a0a··iltin.set_fact:. | ||
| 0003f8e0:· | 0003f8e0:·2020·2020·7273·7973·6c6f·675f·6574·635f······rsyslog_etc_ | ||
| 0003f8f0:· | 0003f8f0:·636f·6e66·6967·3a20·2f65·7463·2f72·7379··config:·/etc/rsy | ||
| 0003f900:·7 | 0003f900:·736c·6f67·2e63·6f6e·660a·2020·7768·656e··slog.conf.··when | ||
| 0003f910:· | 0003f910:·3a0a·2020·2d20·2722·6c69·6e75·782d·6261··:.··-·'"linux-ba | ||
| 0003f920:· | 0003f920:·7365·2220·696e·2061·6e73·6962·6c65·5f66··se"·in·ansible_f | ||
| 0003f930:· | 0003f930:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 0003f940:· | 0003f940:·202d·2027·2272·7379·736c·6f67·2220·696e···-·'"rsyslog"·in | ||
| 0003f950:· | 0003f950:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003f960:· | 0003f960:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | ||
| 0003f970:·0a | 0003f970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003f980:· | 0003f980:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | ||
| 0003f990:· | 0003f990:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | ||
| 0003f9a0:· | 0003f9a0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003f9b0:· | 0003f9b0:·2d31·302e·352e·310a·2020·2d20·5043·492d··-10.5.1.··-·PCI- | ||
| 0003f9c0:· | 0003f9c0:·4453·532d·5265·712d·3130·2e35·2e32·0a20··DSS-Req-10.5.2.· | ||
| 0003f9d0:· | 0003f9d0:·202d·2050·4349·2d44·5353·7634·2d31·302e···-·PCI-DSSv4-10. | ||
| 0003f9e0:· | 0003f9e0:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | ||
| 0003f9f0:· | 0003f9f0:·3130·2e33·2e32·0a20·202d·2063·6f6e·6669··10.3.2.··-·confi | ||
| 0003fa00:· | 0003fa00:·6775·7265·5f73·7472·6174·6567·790a·2020··gure_strategy.·· | ||
| 0003fa10:· | 0003fa10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0003fa20:· | 0003fa20:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003fa30:· | 0003fa30:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 0003fa40:· | 0003fa40:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 0003fa50:· | 0003fa50:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003fa60:· | 0003fa60:·2020·2d20·7273·7973·6c6f·675f·6669·6c65····-·rsyslog_file | ||
| 0003fa70:· | 0003fa70:·735f·6772·6f75·706f·776e·6572·7368·6970··s_groupownership | ||
| 0003fa80:· | 0003fa80:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 0003fa90:· | 0003fa90:·204c·6f67·2046·696c·6573·2041·7265·204f···Log·Files·Are·O | ||
| 0003faa0:· | 0003faa0:·776e·6564·2042·7920·4170·7072·6f70·7269··wned·By·Appropri | ||
| 0003fab0:·6 | 0003fab0:·6174·6520·4772·6f75·7020·2d20·4765·7420··ate·Group·-·Get· | ||
| 0003fac0:· | 0003fac0:·496e·636c·7564·6543·6f6e·6669·6720·6469··IncludeConfig·di | ||
| 0003fad0:· | 0003fad0:·7265·6374·6976·650a·2020·616e·7369·626c··rective.··ansibl | ||
| 0003fae0:·6 | 0003fae0:·652e·6275·696c·7469·6e2e·7368·656c·6c3a··e.builtin.shell: | ||
| 0003faf0:· | 0003faf0:·207c·0a20·2020·2067·7265·7020·2d65·2027···|.····grep·-e·' | ||
| 0003fb00:· | 0003fb00:·2449·6e63·6c75·6465·436f·6e66·6967·2720··$IncludeConfig'· | ||
| 0003fb10:· | 0003fb10:·7b7b·2072·7379·736c·6f67·5f65·7463·5f63··{{·rsyslog_etc_c | ||
| 0003fb20:· | 0003fb20:·6f6e·6669·6720·7d7d·207c·2063·7574·202d··onfig·}}·|·cut·- | ||
| 0003fb30:· | 0003fb30:·6420·2720·2720·2d66·2032·207c·7c20·7472··d·'·'·-f·2·||·tr | ||
| 0003fb40:·5 | 0003fb40:·7565·0a20·2072·6567·6973·7465·723a·2072··ue.··register:·r | ||
| 0003fb50:· | 0003fb50:·7379·736c·6f67·5f6f·6c64·5f69·6e63·0a20··syslog_old_inc.· | ||
| 0003fb60:· | 0003fb60:·2063·6861·6e67·6564·5f77·6865·6e3a·2066···changed_when:·f | ||
| 0003fb70:· | 0003fb70:·616c·7365·0a20·2077·6865·6e3a·0a20·202d··alse.··when:.··- | ||
| 0003fb80:· | 0003fb80:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | ||
| 0003fb90:·6 | 0003fb90:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003fba0:· | 0003fba0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 0003fbb0:· | 0003fbb0:·7273·7973·6c6f·6722·2069·6e20·616e·7369··rsyslog"·in·ansi | ||
| 0003fbc0:· | 0003fbc0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003fbd0:· | 0003fbd0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | ||
| 0003fbe0:· | 0003fbe0:·4e49·5354·2d38·3030·2d35·332d·4143·2d36··NIST-800-53-AC-6 | ||
| 0003fbf0:· | 0003fbf0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003fc00:·2 | 0003fc00:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | ||
| 0003fc10:· | 0003fc10:·5043·492d·4453·532d·5265·712d·3130·2e35··PCI-DSS-Req-10.5 | ||
| 0003fc20:· | 0003fc20:·2e31·0a20·202d·2050·4349·2d44·5353·2d52··.1.··-·PCI-DSS-R | ||
| 0003fc30:·6 | 0003fc30:·6571·2d31·302e·352e·320a·2020·2d20·5043··eq-10.5.2.··-·PC | ||
| 0003fc40:· | 0003fc40:·492d·4453·5376·342d·3130·2e33·0a20·202d··I-DSSv4-10.3.··- | ||
| 0003fc50:· | 0003fc50:·2050·4349·2d44·5353·7634·2d31·302e·332e···PCI-DSSv4-10.3. | ||
| 0003fc60:· | 0003fc60:·320a·2020·2d20·636f·6e66·6967·7572·655f··2.··-·configure_ | ||
| 0003fc70:· | 0003fc70:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | ||
| 0003fc80:·5 | 0003fc80:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003fc90:· | 0003fc90:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003fca0:· | 0003fca0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | ||
| 0003fcb0:·6 | 0003fcb0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | ||
| 0003fcc0:·6 | 0003fcc0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003fcd0:· | 0003fcd0:·7379·736c·6f67·5f66·696c·6573·5f67·726f··syslog_files_gro | ||
| 0003fce0:·776 | 0003fce0:·7570·6f77·6e65·7273·6869·700a·0a2d·206e··upownership..-·n | ||
| 0003fcf0:·6 | 0003fcf0:·616d·653a·2045·6e73·7572·6520·4c6f·6720··ame:·Ensure·Log· | ||
| 0003fd00:· | 0003fd00:·4669·6c65·7320·4172·6520·4f77·6e65·6420··Files·Are·Owned· | ||
| 0003fd10:· | 0003fd10:·4279·2041·7070·726f·7072·6961·7465·2047··By·Appropriate·G | ||
| Max diff block lines reached; 1053107/1159119 bytes (90.85%) of diff not shown. | |||
| Offset 258, 142 lines modified | Offset 258, 14 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 133816/139467 bytes (95.95%) of diff not shown. | |||
| Offset 3, 3731 lines modified | Offset 3, 3731 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>En | 11 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sysadmin_actions_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·gnutls-utils·is·installed</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-package_gnutls-utils_installed_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_explicit_command_args_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Explicit·arguments·in·sudo·specifications</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sudoers_explicit_command_args_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlinkat</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlinkat_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Verify·Only·Root·Has·UID·0</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-a | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_no_uid_except_zero_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-ss | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-ss | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_root_target_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Don't·target·root·user·in·the·sudoers·file</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_root_target_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>En | 83 | ······<ocil:title>Enable·PAM</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-se | 88 | ····<ocil:questionnaire·id="ocil:ssg-securetty_root_login_console_only_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Restrict·Virtual·Console·Root·Logins</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-se | 91 | ········<ocil:test_action_ref>ocil:ssg-securetty_root_login_console_only_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-ac | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·syslog-ng·is·Installed</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-ac | 97 | ········<ocil:test_action_ref>ocil:ssg-package_syslogng_installed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sudo_require_authentication_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure· | 101 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sudo_require_authentication_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-grub2_enable_iommu_force_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>IOMMU·configuration·directive</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_iommu_force_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_path_dirs_no_write_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·that·Root's·Path·Does·Not·Include·World·or·Group-Writable·Directories</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-accounts_root_path_dirs_no_write_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 699005/711640 bytes (98.22%) of diff not shown. | |||
| Offset 3, 5065 lines modified | Offset 3, 5065 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_tmp_noexec_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Configure·System·to·Forward·All·Mail·From·Postmaster·to·The·Root·Account</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_postmaster_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_nss-tools_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·nss-tools·is·installed</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_nss-tools_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-security_patches_up_to_date_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·Software·Patches·Installed</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-security_patches_up_to_date_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_notifiers_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_removed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Remove·the·OpenSSH·Server·Package</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_removed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_gcc_plugin_structleak_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_user_ownership_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>User·Initialization·Files·Must·Be·Owned·By·the·Primary·User</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_dot_user_ownership_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-selinux_state_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·SELinux·State·is·Enforcing</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-selinux_state_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-directory_owner_etc_sysctld_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_proc_kcore_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable·support·for·/proc/kkcore</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_proc_kcore_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_vm_mmap_min_addr_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_unix_rounds_password_auth_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Set·number·of·Password·Hashing·Rounds·-·password-auth</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_unix_rounds_password_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-grub2_l1tf_argument_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Configure·L1·Terminal·Fault·mitigations</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-grub2_l1tf_argument_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_no_sanity_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_ipsec_conf_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·User·Who·Owns·/etc/ipsec.conf·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_ipsec_conf_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-aide_verify_ext_attributes_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>A | 77 | ······<ocil:title>Configure·AIDE·to·Verify·Extended·Attributes</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-aide_verify_ext_attributes_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_home_dirs_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lremovexattr_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lremovexattr</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lremovexattr_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_page_poison_argument_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Enable·page·allocator·poisoning</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-grub2_page_poison_argument_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·gnutls-utils·is·installed</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-package_gnutls-utils_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-directory_groupowner_etc_sudoersd_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_tmout_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Set·Interactive·Session·Timeout</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_tmout_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-timer_logrotate_enabled_ocil:questionnaire:1"> |
| Max diff block lines reached; 1176206/1188322 bytes (98.98%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····1818 | 2 | -rw-r--r--···0········0········0····18184·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·370 | 3 | -rw-r--r--···0········0········0·37087096·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | ||
| 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b0d0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b0d0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b0e0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b0f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b100:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b110:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b120:·6964·6d31·3333·3922·3e3c·7461·626c·6520··idm1339"><table· | |||
| 0003b130:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b140:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b150:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b160:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b170:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b180:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b190:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b0e0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b0f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b100:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b110:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b120:·6170·7365·2220·6964·3d22·6964·6d31·3333··apse"·id="idm133 | |||
| 0003b130:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0003b140:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b150:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b160:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b170:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b180:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b190:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b1a0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b1b0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003b1c0:·3430·2220·7461·6269·6e64·6578·3d22·3022··40"·tabindex="0" | |||
| 0003b1d0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1e0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b1f0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b200:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b210:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b220:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b230:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b240:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b250:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b260:·7073·6522·2069·643d·2269·646d·3133·3430··pse"·id="idm1340 | |||
| 0003b270:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b280:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b290:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b2a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b2b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b1a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b1b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b2e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b1c0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b1d0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b1e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b1f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b320:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b330:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b340:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b350:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b360:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b370:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b380:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b390:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b3a0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b3b0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b | 0003b200:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b210:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b220:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b230:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b240:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b250:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b260:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b270:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b280:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b290:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b2a0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b2b0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b2c0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b2d0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b2e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b2f0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b300:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b310:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b320:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b330:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b340:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b350:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b360:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b370:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b380:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b390:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b3a0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b3b0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b3c0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b3d0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b3e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b3f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b400:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b410:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b420:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b430:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b440:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b450:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b460:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b470:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b480:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b490:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b4a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b4b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b4c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b4d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b4e0:·6172·6765·743d·2223·6964·6d31·3334·3022··arget="#idm1340" | |||
| 0003b4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b550:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b560:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b570:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b580:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b590:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5a0:·2269·646d·3133·3430·223e·3c70·7265·3e3c··"idm1340"><pre>< | |||
| 0003b5b0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| Max diff block lines reached; 21959974/21988016 bytes (99.87%) of diff not shown. | |||
| Offset 15077, 213 lines modified | Offset 15077, 213 lines modified | ||
| 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | ||
| 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003aeb0:·656d·6564·6961·7469·6f6e·204 | 0003aeb0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003aec0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003aed0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aee0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aef0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af00:·646d·3133·3339·223e·3c74·6162·6c65·2063··dm1339"><table·c | |||
| 0003af10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003af20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003af30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003af40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003af50:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003af60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af70:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aec0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003aed0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aee0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003aef0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af00:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003af10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003af20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003af30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003af40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003af50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003af60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003af70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003af80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003af90:·2d74·6172·6765·743d·2223·6964·6d31·3334··-target="#idm134 | |||
| 0003afa0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003afb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003afc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003afd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003afe0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003aff0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b000:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b010:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b020:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b030:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b040:·7365·2220·6964·3d22·6964·6d31·3334·3022··se"·id="idm1340" | |||
| 0003b050:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b060:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b070:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b080:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b090:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003af80:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003af90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b0c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003 | 0003afa0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003afb0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003 | 0003afc0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003afd0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b100:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b110:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b120:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b130:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b140:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b150:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b160:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b170:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b180:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b190:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003 | 0003afe0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003aff0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b000:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b010:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b020:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b030:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b040:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b050:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b060:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b070:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b080:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b090:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b0a0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b0b0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b0c0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b0d0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b0e0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b0f0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b100:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b110:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b120:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b130:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b140:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b150:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b160:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b170:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b180:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b190:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b1a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b1b0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b1c0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b1d0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b1e0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b1f0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b200:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b210:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b220:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b230:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b240:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b250:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b260:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b270:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b280:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b290:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2a0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b2b0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b2c0:·7267·6574·3d22·2369·646d·3133·3430·2220··rget="#idm1340"· | |||
| 0003b2d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b2e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b2f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b300:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b310:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b320:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b330:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b340:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b350:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b360:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b370:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b380:·6964·6d31·3334·3022·3e3c·7072·653e·3c63··idm1340"><pre><c | |||
| 0003b390:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| Max diff block lines reached; 9275084/9303126 bytes (99.70%) of diff not shown. | |||
| Offset 118, 53 lines modified | Offset 118, 14 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 165 | ··package_facts: | 131 | ··package_facts: |
| Offset 193, 14 lines modified | Offset 154, 53 lines modified | ||
| 193 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 194 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 195 | ··-·low_complexity | 156 | ··-·low_complexity |
| 196 | ··-·low_disruption | 157 | ··-·low_disruption |
| 197 | ··-·medium_severity | 158 | ··-·medium_severity |
| 198 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 199 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·rpm·--quiet·-q·kernel;·then | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 173 | ····dnf·install·-y·"aide" | ||
| 174 | fi | ||
| 175 | else | ||
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 177 | fi | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | include·install_aide | ||
| 184 | class·install_aide·{ | ||
| 185 | ··package·{·'aide': | ||
| 186 | ····ensure·=>·'installed', | ||
| 187 | ··} | ||
| 188 | } | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 204 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 199 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 205 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 200 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 206 | newly-generated·database·can·be·installed·as·follows: | 201 | newly-generated·database·can·be·installed·as·follows: |
| Offset 549, 33 lines modified | Offset 549, 14 lines modified | ||
| 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 552 | ·····················FCS_TLSC_EXT.1 | 552 | ·····················FCS_TLSC_EXT.1 |
| 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 554 | ············_\x8c_\x8i_\x8s······1.9 | 554 | ············_\x8c_\x8i_\x8s······1.9 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | var_system_crypto_policy='DEFAULT' | ||
| 558 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 559 | rc=$? | ||
| 560 | if·test·"$rc"·=·127;·then | ||
| 561 | » echo·"$stderr_of_call"·>&2 | ||
| 562 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 563 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1002873/1008103 bytes (99.48%) of diff not shown. | |||
| Offset 15467, 133 lines modified | Offset 15467, 133 lines modified | ||
| 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | ||
| 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c710:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003c720:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c730:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c740:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c750:·6170·7365·2220·6964·3d22·6964·6d31·3231··apse"·id="idm121 | |||
| 0003c760:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003c770:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c780:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c790:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c7a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c7b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c7c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c7d0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c710:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c720:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c730:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c740:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c750:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c760:·6964·3d22·6964·6d31·3231·3422·3e3c·7072··id="idm1214"><pr | |||
| 0003c770:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003c780:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003c790:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003c7a0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003c7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c7f0:·6574·3d22·2369·646d·3132·3135·2220·7461··et="#idm1215"·ta | |||
| 0003c800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c860:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003c870:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c880:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c890:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c8a0:·643d·2269·646d·3132·3135·223e·3c74·6162··d="idm1215"><tab | |||
| 0003c8b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c8c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c8d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c8e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c8f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c | 0003c7e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c920:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c930:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c940:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c950:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c | 0003c7f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c980:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c9a0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003c9b0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c9c0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003c9d0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c9e0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c9f0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003ca00:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003ca10:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ca20:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ca30:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ca40:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ca50:·2d74·6172·6765·743d·2223·6964·6d31·3231··-target="#idm121 | |||
| 0003ca60:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003ca70:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ca80:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ca90:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003caa0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003cab0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c | 0003c800:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c810:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c820:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c830:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c840:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c850:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003c860:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003c870:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003c880:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003c890:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003c8a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c8b0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003c8c0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c8d0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c8e0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c8f0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c900:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c910:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c920:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c930:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c940:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c950:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c960:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c970:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003c980:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003c990:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003c9a0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003c9b0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003c9c0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003c9d0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003c9e0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003c9f0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003ca00:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003ca10:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003ca20:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003ca30:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ca40:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003ca50:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003ca60:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003ca70:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003ca80:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003ca90:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003caa0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003cab0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003cac0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003cad0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003cae0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003caf0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| Max diff block lines reached; 2707304/2724306 bytes (99.38%) of diff not shown. | |||
| Offset 160, 31 lines modified | Offset 160, 14 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | include·install_aide | ||
| 177 | class·install_aide·{ | ||
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | -·name:·Gather·the·package·facts | 172 | -·name:·Gather·the·package·facts |
| 188 | ··package_facts: | 173 | ··package_facts: |
| Offset 213, 14 lines modified | Offset 196, 31 lines modified | ||
| 213 | ··-·PCI-DSSv4-11.5.2 | 196 | ··-·PCI-DSSv4-11.5.2 |
| 214 | ··-·enable_strategy | 197 | ··-·enable_strategy |
| 215 | ··-·low_complexity | 198 | ··-·low_complexity |
| 216 | ··-·low_disruption | 199 | ··-·low_disruption |
| 217 | ··-·medium_severity | 200 | ··-·medium_severity |
| 218 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 219 | ··-·package_aide_installed | 202 | ··-·package_aide_installed |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | [[packages]] | ||
| 205 | name·=·"aide" | ||
| 206 | version·=·"*" | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 221 | Run·the·following·command·to·generate·a·new·database: | 219 | Run·the·following·command·to·generate·a·new·database: |
| 222 | $·sudo·/usr/sbin/aide·--init | 220 | $·sudo·/usr/sbin/aide·--init |
| 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 222 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 223 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 224 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 556, 33 lines modified | Offset 556, 14 lines modified | ||
| 556 | ············_\x8i_\x8s_\x8m······1446 | 556 | ············_\x8i_\x8s_\x8m······1446 |
| 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 560 | ·····················FCS_TLSC_EXT.1 | 560 | ·····················FCS_TLSC_EXT.1 |
| 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 564 | var_system_crypto_policy='DEFAULT' | ||
| 565 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 566 | rc=$? | ||
| 567 | if·test·"$rc"·=·127;·then | ||
| 568 | » echo·"$stderr_of_call"·>&2 | ||
| 569 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 570 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 571 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 572 | » false··#·end·with·an·error·code | ||
| 573 | elif·test·"$rc"·!=·0;·then | ||
| 574 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 575 | » false··#·end·with·an·error·code | ||
| 576 | fi | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 582 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 568 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 583 | ··set_fact: | 569 | ··set_fact: |
| Offset 627, 14 lines modified | Offset 608, 33 lines modified | ||
| 627 | ··-·PCI-DSSv4-2.2.7 | 608 | ··-·PCI-DSSv4-2.2.7 |
| 628 | ··-·configure_crypto_policy | 609 | ··-·configure_crypto_policy |
| 629 | ··-·high_severity | 610 | ··-·high_severity |
| 630 | ··-·low_complexity | 611 | ··-·low_complexity |
| 631 | ··-·low_disruption | 612 | ··-·low_disruption |
| 632 | ··-·no_reboot_needed | 613 | ··-·no_reboot_needed |
| 633 | ··-·restrict_strategy | 614 | ··-·restrict_strategy |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 616 | var_system_crypto_policy='DEFAULT' | ||
| 617 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 618 | rc=$? | ||
| 619 | if·test·"$rc"·=·127;·then | ||
| 620 | » echo·"$stderr_of_call"·>&2 | ||
| 621 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 622 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 623 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 624 | » false··#·end·with·an·error·code | ||
| 625 | elif·test·"$rc"·!=·0;·then | ||
| 626 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 627 | » false··#·end·with·an·error·code | ||
| 628 | fi | ||
| 634 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 629 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 635 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 630 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 636 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 631 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 316806/322202 bytes (98.33%) of diff not shown. | |||
| Offset 16285, 195 lines modified | Offset 16285, 195 lines modified | ||
| 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | ||
| 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003fa30:·6d65·6469·6174·696f·6e20· | 0003fa30:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003fa40:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003fa50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003fa60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003fa70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003fa80:·6d31·3434·3222·3e3c·7461·626c·6520·636c··m1442"><table·cl | |||
| 0003fa90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003faa0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003fab0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003fac0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003fad0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003fa40:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003fa50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003fa60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003fa70:·6c61·7073·6522·2069·643d·2269·646d·3134··lapse"·id="idm14 | |||
| 0003fa80:·3432·223e·3c70·7265·3e3c·636f·6465·3e23··42"><pre><code># | |||
| 0003fa90:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003faa0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003fab0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003fac0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003fad0:·6965·7420·2d71·2062·696e·643b·2074·6865··iet·-q·bind;·the | |||
| 0003fae0:·6e0a·0a66·756e·6374·696f·6e20·7265·6d65··n..function·reme | |||
| 0003faf0:·6469·6174·655f·6269·6e64·5f63·7279·7074··diate_bind_crypt | |||
| 0003fb00:·6f5f·706f·6c69·6379·2829·207b·0a09·434f··o_policy()·{..CO | |||
| 0003fb10:·4e46·4947·5f46·494c·453d·222f·6574·632f··NFIG_FILE="/etc/ | |||
| 0003fb20:·6e61·6d65·642e·636f·6e66·220a·0969·6620··named.conf"..if· | |||
| 0003fb30:·7465·7374·202d·6620·2224·434f·4e46·4947··test·-f·"$CONFIG | |||
| 0003fb40:·5f46·494c·4522·3b20·7468·656e·0a09·0973··_FILE";·then...s | |||
| 0003fb50:·6564·202d·6920·2773·7c6f·7074·696f·6e73··ed·-i·'s|options | |||
| 0003fb60:·207b·7c26·616d·703b·5c6e·5c74·696e·636c···{|&\n\tincl | |||
| 0003fb70:·7564·6520·222f·6574·632f·6372·7970·746f··ude·"/etc/crypto | |||
| 0003fb80:·2d70·6f6c·6963·6965·732f·6261·636b·2d65··-policies/back-e | |||
| 0003fb90:·6e64·732f·6269·6e64·2e63·6f6e·6669·6722··nds/bind.config" | |||
| 0003fba0:·3b7c·2720·2224·434f·4e46·4947·5f46·494c··;|'·"$CONFIG_FIL | |||
| 0003fbb0:·4522·0a09·0972·6574·7572·6e20·300a·0965··E"...return·0..e | |||
| 0003fbc0:·6c73·650a·0909·6563·686f·2022·4162·6f72··lse...echo·"Abor | |||
| 0003fbd0:·7469·6e67·2072·656d·6564·6961·7469·6f6e··ting·remediation | |||
| 0003fbe0:·2061·7320·2724·434f·4e46·4947·5f46·494c···as·'$CONFIG_FIL | |||
| 0003fbf0:·4527·2077·6173·206e·6f74·2065·7665·6e20··E'·was·not·even· | |||
| 0003fc00:·666f·756e·642e·2220·2667·743b·2661·6d70··found."·>& | |||
| 0003fc10:·3b32·0a09·0972·6574·7572·6e20·310a·0966··;2...return·1..f | |||
| 0003fc20:·690a·7d0a·0a72·656d·6564·6961·7465·5f62··i.}..remediate_b | |||
| 0003fc30:·696e·645f·6372·7970·746f·5f70·6f6c·6963··ind_crypto_polic | |||
| 0003fc40:·790a·0a65·6c73·650a·2020·2020·2667·743b··y..else.····> | |||
| 0003fc50:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003fc60:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003fc70:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003fc80:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003fc90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003fca0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003fcb0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003fcc0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003fcd0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003fce0:·743d·2223·6964·6d31·3434·3322·2074·6162··t="#idm1443"·tab | |||
| 0003fcf0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003fd00:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003fd10:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003fd20:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003fd30:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003fd40:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003fd50:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003fd60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003fd70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003fd80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003fd90:·643d·2269·646d·3134·3433·223e·3c74·6162··d="idm1443"><tab | |||
| 0003fda0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003fdb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003fdc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003fdd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003fde0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003fdf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003fe00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003fe10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003f | 0003fae0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003fe30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003f | 0003faf0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003fb00:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003f | 0003fb10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003fe60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003fe70:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003fe80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003fe90:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003f | 0003fb20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003fb30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003fb40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003fb50:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | |||
| 0003fb60:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | |||
| 0003fb70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003fb80:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003fb90:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003fba0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003fbb0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003fbc0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003fbd0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003fbe0:·2d31·3228·3229·0a20·202d·204e·4953·542d··-12(2).··-·NIST- | |||
| 0003fbf0:·3830·302d·3533·2d53·432d·3132·2833·290a··800-53-SC-12(3). | |||
| 0003fc00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003fc10:·5343·2d31·330a·2020·2d20·636f·6e66·6967··SC-13.··-·config | |||
| 0003fc20:·7572·655f·6269·6e64·5f63·7279·7074·6f5f··ure_bind_crypto_ | |||
| 0003fc30:·706f·6c69·6379·0a20·202d·2063·6f6e·6669··policy.··-·confi | |||
| 0003fc40:·6775·7265·5f73·7472·6174·6567·790a·2020··gure_strategy.·· | |||
| 0003fc50:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003fc60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003fc70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003fc80:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003fc90:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | |||
| 0003fca0:·6d65·3a20·436f·6e66·6967·7572·6520·4249··me:·Configure·BI | |||
| 0003fcb0:·4e44·2074·6f20·7573·6520·5379·7374·656d··ND·to·use·System | |||
| 0003fcc0:·2043·7279·7074·6f20·506f·6c69·6379·202d···Crypto·Policy·- | |||
| 0003fcd0:·2043·6865·636b·2042·494e·4420·636f·6e66···Check·BIND·conf | |||
| 0003fce0:·6967·7572·6174·696f·6e20·6669·6c65·0a20··iguration·file.· | |||
| 0003fcf0:·2020·2065·7869·7374·730a·2020·616e·7369·····exists.··ansi | |||
| 0003fd00:·626c·652e·6275·696c·7469·6e2e·7374·6174··ble.builtin.stat | |||
| 0003fd10:·3a0a·2020·2020·7061·7468·3a20·2f65·7463··:.····path:·/etc | |||
| 0003fd20:·2f6e·616d·6564·2e63·6f6e·660a·2020·7265··/named.conf.··re | |||
| 0003fd30:·6769·7374·6572·3a20·6269·6e64·5f63·6f6e··gister:·bind_con | |||
| 0003fd40:·6669·675f·6669·6c65·0a20·2077·6865·6e3a··fig_file.··when: | |||
| 0003fd50:·2027·2262·696e·6422·2069·6e20·616e·7369···'"bind"·in·ansi | |||
| 0003f | 0003fd60:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003fd70:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| Max diff block lines reached; 371196/396754 bytes (93.56%) of diff not shown. | |||
| Offset 343, 35 lines modified | Offset 343, 14 lines modified | ||
| 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 344 | Severity: ··high | 344 | Severity: ··high |
| 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 352 | if·rpm·--quiet·-q·bind;·then | ||
| 353 | function·remediate_bind_crypto_policy()·{ | ||
| 354 | » CONFIG_FILE="/etc/named.conf" | ||
| 355 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 356 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 357 | "$CONFIG_FILE" | ||
| 358 | » » return·0 | ||
| 359 | » else | ||
| 360 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 361 | » » return·1 | ||
| 362 | » fi | ||
| 363 | } | ||
| 364 | remediate_bind_crypto_policy | ||
| 365 | else | ||
| 366 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 367 | fi | ||
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 373 | -·name:·Gather·the·package·facts | 355 | -·name:·Gather·the·package·facts |
| 374 | ··package_facts: | 356 | ··package_facts: |
| Offset 438, 14 lines modified | Offset 417, 35 lines modified | ||
| 438 | ··-·NIST-800-53-SC-13 | 417 | ··-·NIST-800-53-SC-13 |
| 439 | ··-·configure_bind_crypto_policy | 418 | ··-·configure_bind_crypto_policy |
| 440 | ··-·configure_strategy | 419 | ··-·configure_strategy |
| 441 | ··-·high_severity | 420 | ··-·high_severity |
| 442 | ··-·low_complexity | 421 | ··-·low_complexity |
| 443 | ··-·low_disruption | 422 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 423 | ··-·no_reboot_needed |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 425 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 426 | if·rpm·--quiet·-q·bind;·then | ||
| 427 | function·remediate_bind_crypto_policy()·{ | ||
| 428 | » CONFIG_FILE="/etc/named.conf" | ||
| 429 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 430 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 431 | "$CONFIG_FILE" | ||
| 432 | » » return·0 | ||
| 433 | » else | ||
| 434 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 435 | » » return·1 | ||
| 436 | » fi | ||
| 437 | } | ||
| 438 | remediate_bind_crypto_policy | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 445 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 442 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 446 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 443 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 447 | policy,·run·the·following·command: | 444 | policy,·run·the·following·command: |
| 448 | $·sudo·update-crypto-policies·--set·DEFAULT | 445 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 449 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 446 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 450 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 447 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 451 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 448 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 478, 34 lines modified | Offset 478, 14 lines modified | ||
| 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 483 | ·····················GPOS-00174 | 483 | ·····················GPOS-00174 |
| 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 486 | var_system_crypto_policy='DEFAULT' | ||
| 487 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 488 | null) | ||
| 489 | rc=$? | ||
| 490 | if·test·"$rc"·=·127;·then | ||
| 491 | » echo·"$stderr_of_call"·>&2 | ||
| 492 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 493 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 494 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 495 | » false··#·end·with·an·error·code | ||
| 496 | elif·test·"$rc"·!=·0;·then | ||
| 497 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 498 | » false··#·end·with·an·error·code | ||
| 499 | fi | ||
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 505 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 490 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 506 | ··set_fact: | 491 | ··set_fact: |
| Offset 550, 14 lines modified | Offset 530, 34 lines modified | ||
| 550 | ··-·PCI-DSSv4-2.2.7 | 530 | ··-·PCI-DSSv4-2.2.7 |
| 551 | ··-·configure_crypto_policy | 531 | ··-·configure_crypto_policy |
| 552 | ··-·high_severity | 532 | ··-·high_severity |
| 553 | ··-·low_complexity | 533 | ··-·low_complexity |
| 554 | ··-·low_disruption | 534 | ··-·low_disruption |
| 555 | ··-·no_reboot_needed | 535 | ··-·no_reboot_needed |
| 556 | ··-·restrict_strategy | 536 | ··-·restrict_strategy |
| 537 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 538 | var_system_crypto_policy='DEFAULT' | ||
| 539 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 540 | null) | ||
| 541 | rc=$? | ||
| 542 | if·test·"$rc"·=·127;·then | ||
| 543 | » echo·"$stderr_of_call"·>&2 | ||
| 544 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 545 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 35177/40452 bytes (86.96%) of diff not shown. | |||
| Offset 15823, 134 lines modified | Offset 15823, 134 lines modified | ||
| 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | ||
| 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd50:·656d·6564·6961·7469·6f6e·204 | 0003dd50:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003dd60:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dd70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003dd80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003dd90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003dda0:·646d·3133·3038·223e·3c74·6162·6c65·2063··dm1308"><table·c | |||
| 0003ddb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ddd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003dde0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ddf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003de10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003dd60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003dd70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003dd80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003dd90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003dda0:·7073·6522·2069·643d·2269·646d·3133·3038··pse"·id="idm1308 | |||
| 0003ddb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ddc0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ddd0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003dde0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ddf0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003de00:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003de10:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003de20:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003de30:·2d74·6172·6765·743d·2223·6964·6d31·3330··-target="#idm130 | |||
| 0003de40:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003de50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003de60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003de70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003de80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003de90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003dea0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003deb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003dec0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ded0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003dee0:·7365·2220·6964·3d22·6964·6d31·3330·3922··se"·id="idm1309" | |||
| 0003def0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003df00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003df10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003df20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003df30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003d | 0003de20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003d | 0003de30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003df60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003d | 0003de40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003de50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003d | 0003de60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003d | 0003de70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003dfa0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003dfb0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003dfc0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003dfd0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003dfe0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003dff0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003e000:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003e010:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003e020:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003e030:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003e040:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003e050:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003e060:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003e070:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003e080:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003e090:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003e0a0:·646d·3133·3130·2220·7461·6269·6e64·6578··dm1310"·tabindex | |||
| 0003e0b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003e0c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003e0d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003e0e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003e0f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003 | 0003de80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003de90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003dea0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003deb0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003dec0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003ded0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003dee0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003def0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003df00:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003df10:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003df20:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003df30:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003df40:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003df50:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003df60:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003df70:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003df80:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003df90:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003dfa0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003dfb0:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003dfc0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003dfd0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003dfe0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003dff0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003e000:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003e010:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003e020:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003e030:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003e040:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003e050:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003e060:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003e070:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003e080:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003e090:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003e0a0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003e0b0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003e0c0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003e0d0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003e0e0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003e0f0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003e100:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003e110:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003e120:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003e130:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003e140:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003e150:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003e160:·7267·6574·3d22·2369·646d·3133·3039·2220··rget="#idm1309"· | |||
| 0003e170:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| Max diff block lines reached; 2635805/2652945 bytes (99.35%) of diff not shown. | |||
| Offset 202, 31 lines modified | Offset 202, 14 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 218 | include·install_aide | ||
| 219 | class·install_aide·{ | ||
| 220 | ··package·{·'aide': | ||
| 221 | ····ensure·=>·'installed', | ||
| 222 | ··} | ||
| 223 | } | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 229 | -·name:·Gather·the·package·facts | 214 | -·name:·Gather·the·package·facts |
| 230 | ··package_facts: | 215 | ··package_facts: |
| Offset 255, 14 lines modified | Offset 238, 31 lines modified | ||
| 255 | ··-·PCI-DSSv4-11.5.2 | 238 | ··-·PCI-DSSv4-11.5.2 |
| 256 | ··-·enable_strategy | 239 | ··-·enable_strategy |
| 257 | ··-·low_complexity | 240 | ··-·low_complexity |
| 258 | ··-·low_disruption | 241 | ··-·low_disruption |
| 259 | ··-·medium_severity | 242 | ··-·medium_severity |
| 260 | ··-·no_reboot_needed | 243 | ··-·no_reboot_needed |
| 261 | ··-·package_aide_installed | 244 | ··-·package_aide_installed |
| 245 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 246 | [[packages]] | ||
| 247 | name·=·"aide" | ||
| 248 | version·=·"*" | ||
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 250 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 251 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 252 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 253 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 254 | include·install_aide | ||
| 255 | class·install_aide·{ | ||
| 256 | ··package·{·'aide': | ||
| 257 | ····ensure·=>·'installed', | ||
| 258 | ··} | ||
| 259 | } | ||
| 262 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 260 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 263 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 261 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 264 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 262 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 265 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 263 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 266 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 264 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 267 | crontab: | 265 | crontab: |
| 268 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 266 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 475, 33 lines modified | Offset 475, 14 lines modified | ||
| 475 | ············_\x8i_\x8s_\x8m······1446 | 475 | ············_\x8i_\x8s_\x8m······1446 |
| 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 479 | ·····················FCS_TLSC_EXT.1 | 479 | ·····················FCS_TLSC_EXT.1 |
| 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 483 | var_system_crypto_policy='DEFAULT' | ||
| 484 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 485 | rc=$? | ||
| 486 | if·test·"$rc"·=·127;·then | ||
| 487 | » echo·"$stderr_of_call"·>&2 | ||
| 488 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 489 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 490 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 491 | » false··#·end·with·an·error·code | ||
| 492 | elif·test·"$rc"·!=·0;·then | ||
| 493 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | fi | ||
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 501 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 487 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 502 | ··set_fact: | 488 | ··set_fact: |
| Offset 546, 14 lines modified | Offset 527, 33 lines modified | ||
| 546 | ··-·PCI-DSSv4-2.2.7 | 527 | ··-·PCI-DSSv4-2.2.7 |
| 547 | ··-·configure_crypto_policy | 528 | ··-·configure_crypto_policy |
| 548 | ··-·high_severity | 529 | ··-·high_severity |
| 549 | ··-·low_complexity | 530 | ··-·low_complexity |
| 550 | ··-·low_disruption | 531 | ··-·low_disruption |
| 551 | ··-·no_reboot_needed | 532 | ··-·no_reboot_needed |
| 552 | ··-·restrict_strategy | 533 | ··-·restrict_strategy |
| 534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 535 | var_system_crypto_policy='DEFAULT' | ||
| 536 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 537 | rc=$? | ||
| 538 | if·test·"$rc"·=·127;·then | ||
| 539 | » echo·"$stderr_of_call"·>&2 | ||
| 540 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 541 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 542 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 543 | » false··#·end·with·an·error·code | ||
| 544 | elif·test·"$rc"·!=·0;·then | ||
| 545 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 546 | » false··#·end·with·an·error·code | ||
| 547 | fi | ||
| 553 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 554 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 555 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 550 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 297188/302506 bytes (98.24%) of diff not shown. | |||
| Offset 15755, 195 lines modified | Offset 15755, 195 lines modified | ||
| 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | ||
| 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003d910:·6469·6174·696f·6e20· | 0003d910:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003d920:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003d930:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003d940:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003d950:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003d960:·3435·3022·3e3c·7461·626c·6520·636c·6173··450"><table·clas | |||
| 0003d970:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003d980:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003d990:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003d9a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003d9b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003d920:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003d930:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003d940:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003d950:·7073·6522·2069·643d·2269·646d·3134·3530··pse"·id="idm1450 | |||
| 0003d960:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003d970:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003d980:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003d990:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003d9a0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003d9b0:·7420·2d71·2062·696e·643b·2074·6865·6e0a··t·-q·bind;·then. | |||
| 0003d9c0:·0a66·756e·6374·696f·6e20·7265·6d65·6469··.function·remedi | |||
| 0003d9d0:·6174·655f·6269·6e64·5f63·7279·7074·6f5f··ate_bind_crypto_ | |||
| 0003d9e0:·706f·6c69·6379·2829·207b·0a09·434f·4e46··policy()·{..CONF | |||
| 0003d9f0:·4947·5f46·494c·453d·222f·6574·632f·6e61··IG_FILE="/etc/na | |||
| 0003da00:·6d65·642e·636f·6e66·220a·0969·6620·7465··med.conf"..if·te | |||
| 0003da10:·7374·202d·6620·2224·434f·4e46·4947·5f46··st·-f·"$CONFIG_F | |||
| 0003da20:·494c·4522·3b20·7468·656e·0a09·0973·6564··ILE";·then...sed | |||
| 0003da30:·202d·6920·2773·7c6f·7074·696f·6e73·207b···-i·'s|options·{ | |||
| 0003da40:·7c26·616d·703b·5c6e·5c74·696e·636c·7564··|&\n\tinclud | |||
| 0003da50:·6520·222f·6574·632f·6372·7970·746f·2d70··e·"/etc/crypto-p | |||
| 0003da60:·6f6c·6963·6965·732f·6261·636b·2d65·6e64··olicies/back-end | |||
| 0003da70:·732f·6269·6e64·2e63·6f6e·6669·6722·3b7c··s/bind.config";| | |||
| 0003da80:·2720·2224·434f·4e46·4947·5f46·494c·4522··'·"$CONFIG_FILE" | |||
| 0003da90:·0a09·0972·6574·7572·6e20·300a·0965·6c73··...return·0..els | |||
| 0003daa0:·650a·0909·6563·686f·2022·4162·6f72·7469··e...echo·"Aborti | |||
| 0003dab0:·6e67·2072·656d·6564·6961·7469·6f6e·2061··ng·remediation·a | |||
| 0003dac0:·7320·2724·434f·4e46·4947·5f46·494c·4527··s·'$CONFIG_FILE' | |||
| 0003dad0:·2077·6173·206e·6f74·2065·7665·6e20·666f···was·not·even·fo | |||
| 0003dae0:·756e·642e·2220·2667·743b·2661·6d70·3b32··und."·>&2 | |||
| 0003daf0:·0a09·0972·6574·7572·6e20·310a·0966·690a··...return·1..fi. | |||
| 0003db00:·7d0a·0a72·656d·6564·6961·7465·5f62·696e··}..remediate_bin | |||
| 0003db10:·645f·6372·7970·746f·5f70·6f6c·6963·790a··d_crypto_policy. | |||
| 0003db20:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003db30:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003db40:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003db50:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003db60:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003db70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003db80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003db90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003dba0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003dbb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003dbc0:·2223·6964·6d31·3435·3122·2074·6162·696e··"#idm1451"·tabin | |||
| 0003dbd0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003dbe0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003dbf0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003dc00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003dc10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003dc20:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003dc30:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003dc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003dc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003dc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003dc70:·2269·646d·3134·3531·223e·3c74·6162·6c65··"idm1451"><table | |||
| 0003dc80:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003dc90:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003dca0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003dcb0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003dcc0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003dcd0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003dce0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003dcf0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d | 0003d9c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003dd10:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003d | 0003d9d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003d9e0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003d | 0003d9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003dd40:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003dd50:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003dd60:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003dd70:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003d | 0003da00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003da10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003da20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003da30:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | |||
| 0003da40:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | |||
| 0003da50:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003da60:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003da70:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003da80:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003da90:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003daa0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003dab0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003dac0:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003dad0:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003dae0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003daf0:·2d31·330a·2020·2d20·636f·6e66·6967·7572··-13.··-·configur | |||
| 0003db00:·655f·6269·6e64·5f63·7279·7074·6f5f·706f··e_bind_crypto_po | |||
| 0003db10:·6c69·6379·0a20·202d·2063·6f6e·6669·6775··licy.··-·configu | |||
| 0003db20:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003db30:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | |||
| 0003db40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003db50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003db60:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | |||
| 0003db70:·745f·6e65·6564·6564·0a0a·2d20·6e61·6d65··t_needed..-·name | |||
| 0003db80:·3a20·436f·6e66·6967·7572·6520·4249·4e44··:·Configure·BIND | |||
| 0003db90:·2074·6f20·7573·6520·5379·7374·656d·2043···to·use·System·C | |||
| 0003dba0:·7279·7074·6f20·506f·6c69·6379·202d·2043··rypto·Policy·-·C | |||
| 0003dbb0:·6865·636b·2042·494e·4420·636f·6e66·6967··heck·BIND·config | |||
| 0003dbc0:·7572·6174·696f·6e20·6669·6c65·0a20·2020··uration·file.··· | |||
| 0003dbd0:·2065·7869·7374·730a·2020·616e·7369·626c···exists.··ansibl | |||
| 0003dbe0:·652e·6275·696c·7469·6e2e·7374·6174·3a0a··e.builtin.stat:. | |||
| 0003dbf0:·2020·2020·7061·7468·3a20·2f65·7463·2f6e······path:·/etc/n | |||
| 0003dc00:·616d·6564·2e63·6f6e·660a·2020·7265·6769··amed.conf.··regi | |||
| 0003dc10:·7374·6572·3a20·6269·6e64·5f63·6f6e·6669··ster:·bind_confi | |||
| 0003dc20:·675f·6669·6c65·0a20·2077·6865·6e3a·2027··g_file.··when:·' | |||
| 0003dc30:·2262·696e·6422·2069·6e20·616e·7369·626c··"bind"·in·ansibl | |||
| 0003d | 0003dc40:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003dc50:·270a·2020·7461·6773·3a0a·2020·2d20·4e49··'.··tags:.··-·NI | |||
| Max diff block lines reached; 328979/354537 bytes (92.79%) of diff not shown. | |||
| Offset 208, 35 lines modified | Offset 208, 14 lines modified | ||
| 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 209 | Severity: ··high | 209 | Severity: ··high |
| 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·rpm·--quiet·-q·bind;·then | ||
| 218 | function·remediate_bind_crypto_policy()·{ | ||
| 219 | » CONFIG_FILE="/etc/named.conf" | ||
| 220 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 221 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 222 | "$CONFIG_FILE" | ||
| 223 | » » return·0 | ||
| 224 | » else | ||
| 225 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 226 | » » return·1 | ||
| 227 | » fi | ||
| 228 | } | ||
| 229 | remediate_bind_crypto_policy | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 238 | -·name:·Gather·the·package·facts | 220 | -·name:·Gather·the·package·facts |
| 239 | ··package_facts: | 221 | ··package_facts: |
| Offset 303, 14 lines modified | Offset 282, 35 lines modified | ||
| 303 | ··-·NIST-800-53-SC-13 | 282 | ··-·NIST-800-53-SC-13 |
| 304 | ··-·configure_bind_crypto_policy | 283 | ··-·configure_bind_crypto_policy |
| 305 | ··-·configure_strategy | 284 | ··-·configure_strategy |
| 306 | ··-·high_severity | 285 | ··-·high_severity |
| 307 | ··-·low_complexity | 286 | ··-·low_complexity |
| 308 | ··-·low_disruption | 287 | ··-·low_disruption |
| 309 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·bind;·then | ||
| 292 | function·remediate_bind_crypto_policy()·{ | ||
| 293 | » CONFIG_FILE="/etc/named.conf" | ||
| 294 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 295 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 296 | "$CONFIG_FILE" | ||
| 297 | » » return·0 | ||
| 298 | » else | ||
| 299 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 300 | » » return·1 | ||
| 301 | » fi | ||
| 302 | } | ||
| 303 | remediate_bind_crypto_policy | ||
| 304 | else | ||
| 305 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 306 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 308 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 312 | policy,·run·the·following·command: | 309 | policy,·run·the·following·command: |
| 313 | $·sudo·update-crypto-policies·--set·DEFAULT | 310 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 314 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 311 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 315 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 312 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 316 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 313 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 343, 34 lines modified | Offset 343, 14 lines modified | ||
| 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 348 | ·····················GPOS-00174 | 348 | ·····················GPOS-00174 |
| 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | var_system_crypto_policy='DEFAULT' | ||
| 352 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 353 | null) | ||
| 354 | rc=$? | ||
| 355 | if·test·"$rc"·=·127;·then | ||
| 356 | » echo·"$stderr_of_call"·>&2 | ||
| 357 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 358 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 359 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | elif·test·"$rc"·!=·0;·then | ||
| 362 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 363 | » false··#·end·with·an·error·code | ||
| 364 | fi | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 370 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 355 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 371 | ··set_fact: | 356 | ··set_fact: |
| Offset 415, 14 lines modified | Offset 395, 34 lines modified | ||
| 415 | ··-·PCI-DSSv4-2.2.7 | 395 | ··-·PCI-DSSv4-2.2.7 |
| 416 | ··-·configure_crypto_policy | 396 | ··-·configure_crypto_policy |
| 417 | ··-·high_severity | 397 | ··-·high_severity |
| 418 | ··-·low_complexity | 398 | ··-·low_complexity |
| 419 | ··-·low_disruption | 399 | ··-·low_disruption |
| 420 | ··-·no_reboot_needed | 400 | ··-·no_reboot_needed |
| 421 | ··-·restrict_strategy | 401 | ··-·restrict_strategy |
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 403 | var_system_crypto_policy='DEFAULT' | ||
| 404 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 405 | null) | ||
| 406 | rc=$? | ||
| 407 | if·test·"$rc"·=·127;·then | ||
| 408 | » echo·"$stderr_of_call"·>&2 | ||
| 409 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 410 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 29575/34850 bytes (84.86%) of diff not shown. | |||
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | ||
| 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b0d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b0e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b0f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b100:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b110:·7073·6522·2069·643d·2269·646d·3331·3837··pse"·id="idm3187 | |||
| 0003b120:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b130:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b140:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b150:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b160:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b170:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b180:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b190:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b0d0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b0e0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b0f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b100:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b110:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b120:·643d·2269·646d·3331·3837·223e·3c70·7265··d="idm3187"><pre | |||
| 0003b130:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b140:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b150:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b160:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b170:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b180:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b190:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b1a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b1b0:·743d·2223·6964·6d33·3138·3822·2074·6162··t="#idm3188"·tab | |||
| 0003b1c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b1d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b1e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b1f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b200:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b210:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b220:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b230:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b240:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b250:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b260:·3d22·6964·6d33·3138·3822·3e3c·7461·626c··="idm3188"><tabl | |||
| 0003b270:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b280:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b290:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b2a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b2b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b1a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b1b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b1c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b1d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b1e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b1f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b320:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b330:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b340:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b350:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b360:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b370:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b380:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b390:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b3a0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b3b0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b | 0003b200:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b210:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b220:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b230:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b240:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b250:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b260:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b270:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b280:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b290:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b2a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b2b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b2e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b2f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b300:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b310:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b320:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b330:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b340:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b350:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b360:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b370:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b380:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b390:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b3a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b3b0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b3c0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b3d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b3e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b3f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b400:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b410:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b420:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b430:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b440:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b450:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b460:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b470:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b480:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b490:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b4a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b4b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b4c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b4d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b4e0:·2369·646d·3331·3838·2220·7461·6269·6e64··#idm3188"·tabind | |||
| 0003b4f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b500:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b510:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b520:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b530:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b540:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b550:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b560:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b570:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b580:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b590:·6170·7365·2220·6964·3d22·6964·6d33·3138··apse"·id="idm318 | |||
| 0003b5a0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b5b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| Max diff block lines reached; 22203756/22231798 bytes (99.87%) of diff not shown. | |||
| Offset 15073, 213 lines modified | Offset 15073, 213 lines modified | ||
| 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | ||
| 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003ae70:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003ae80:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae90:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae70:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003ae80:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aea0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aeb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aec0:·6d33·3138·3722·3e3c·7072·653e·3c63·6f64··m3187"><pre><cod | |||
| 0003aed0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003aee0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003aef0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003af00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003af10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003af20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003af30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003af40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003af50:·646d·3331·3838·2220·7461·6269·6e64·6578··dm3188"·tabindex | |||
| 0003af60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003af70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003af80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003af90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003afa0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003afb0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003afc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003afd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a | 0003aea0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003aff0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b000:·3331·3838·223e·3c74·6162·6c65·2063·6c61··3188"><table·cla | |||
| 0003b010:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b020:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b030:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b040:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003 | 0003aeb0:·6964·3d22·6964·6d33·3138·3722·3e3c·7461··id="idm3187"><ta | ||
| 0003aec0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aed0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aee0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003aef0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003af10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003af20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003 | 0003af40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b070:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003 | 0003af50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003af60:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003 | 0003af70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b0a0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b0b0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b0c0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b0d0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b0e0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b0f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b100:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b110:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b120:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b130:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b140:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003 | 0003af80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003af90:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003afa0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003afb0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003afc0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003afd0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003afe0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003aff0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b000:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b010:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b020:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b030:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b040:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b050:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b060:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b070:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b080:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b090:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0a0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0b0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0c0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0d0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b0e0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b0f0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b100:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b110:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b120:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b130:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b140:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b150:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b160:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b170:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b180:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b190:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b1a0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b1b0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1c0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1d0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1e0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1f0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b200:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b210:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b220:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b230:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b240:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b250:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b260:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b270:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | |||
| 0003b280:·3138·3822·2074·6162·696e·6465·783d·2230··188"·tabindex="0 | |||
| 0003b290:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b2a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b2b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b2c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b2d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b2e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b2f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b300:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b310:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b320:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b330:·2069·643d·2269·646d·3331·3838·223e·3c70···id="idm3188"><p | |||
| 0003b340:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b350:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| Max diff block lines reached; 9537951/9565993 bytes (99.71%) of diff not shown. | |||
| Offset 113, 53 lines modified | Offset 113, 14 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8c_\x8i_\x8s············6.1.1 | 118 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | include·install_aide | ||
| 130 | class·install_aide·{ | ||
| 131 | ··package·{·'aide': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | } | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·rpm·--quiet·-q·kernel;·then | ||
| 142 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 143 | ····dnf·install·-y·"aide" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Gather·the·package·facts | 125 | -·name:·Gather·the·package·facts |
| 160 | ··package_facts: | 126 | ··package_facts: |
| Offset 188, 14 lines modified | Offset 149, 53 lines modified | ||
| 188 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 189 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 190 | ··-·low_complexity | 151 | ··-·low_complexity |
| 191 | ··-·low_disruption | 152 | ··-·low_disruption |
| 192 | ··-·medium_severity | 153 | ··-·medium_severity |
| 193 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 194 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | include·install_aide | ||
| 179 | class·install_aide·{ | ||
| 180 | ··package·{·'aide': | ||
| 181 | ····ensure·=>·'installed', | ||
| 182 | ··} | ||
| 183 | } | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 199 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 194 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 200 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 535, 33 lines modified | Offset 535, 14 lines modified | ||
| 535 | ············_\x8i_\x8s_\x8m······1446 | 535 | ············_\x8i_\x8s_\x8m······1446 |
| 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 540 | ············_\x8c_\x8i_\x8s······1.6.1 | 540 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 543 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 544 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 545 | rc=$? | ||
| 546 | if·test·"$rc"·=·127;·then | ||
| 547 | » echo·"$stderr_of_call"·>&2 | ||
| 548 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 549 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1066000/1071315 bytes (99.50%) of diff not shown. | |||
| Offset 15064, 213 lines modified | Offset 15064, 213 lines modified | ||
| 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | ||
| 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | ||
| 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ade0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003adf0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ae00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae20:·6170·7365·2220·6964·3d22·6964·6d33·3138··apse"·id="idm318 | |||
| 0003ae30:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003ae40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae70:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae80:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003aea0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ade0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003adf0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ae00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae30:·6964·3d22·6964·6d33·3138·3722·3e3c·7072··id="idm3187"><pr | |||
| 0003ae40:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae50:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae60:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ae70:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ae80:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ae90:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003aea0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003aeb0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003aec0:·6574·3d22·2369·646d·3331·3838·2220·7461··et="#idm3188"·ta | |||
| 0003aed0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003aee0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aef0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003af00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003af10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003af20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003af30:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003af40:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af50:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af60:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003af70:·643d·2269·646d·3331·3838·223e·3c74·6162··d="idm3188"><tab | |||
| 0003af80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003af90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003afa0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003afb0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003afc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a | 0003aeb0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003a | 0003aec0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003aff0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b000:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003 | 0003aed0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003aee0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aef0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003 | 0003af00:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003b030:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b040:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b050:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b060:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b070:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b080:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b090:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b0a0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b0b0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b0c0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003 | 0003af10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003af20:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003af30:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003af40:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003af50:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003af60:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003af70:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003af80:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003af90:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003afa0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003afb0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003afc0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003afd0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003afe0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003aff0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b000:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b010:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b020:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b030:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b040:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b050:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b060:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b070:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b080:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b090:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b0a0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b0b0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b0c0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b0d0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b0e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b0f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b100:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b110:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b120:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b130:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b140:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b150:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b160:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b170:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b180:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b190:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b1a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b1b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b1d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b1e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b1f0:·2223·6964·6d33·3138·3822·2074·6162·696e··"#idm3188"·tabin | |||
| 0003b200:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b210:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b220:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b230:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b240:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b250:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b260:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b270:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b280:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b290:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2a0:·6c61·7073·6522·2069·643d·2269·646d·3331··lapse"·id="idm31 | |||
| Max diff block lines reached; 9294753/9322795 bytes (99.70%) of diff not shown. | |||
| Offset 112, 53 lines modified | Offset 112, 14 lines modified | ||
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8c_\x8i_\x8s············6.1.1 | 117 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_aide | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·rpm·--quiet·-q·kernel;·then | ||
| 141 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 142 | ····dnf·install·-y·"aide" | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·--add=aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 124 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 125 | ··package_facts: |
| Offset 187, 14 lines modified | Offset 148, 53 lines modified | ||
| 187 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 188 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 189 | ··-·low_complexity | 150 | ··-·low_complexity |
| 190 | ··-·low_disruption | 151 | ··-·low_disruption |
| 191 | ··-·medium_severity | 152 | ··-·medium_severity |
| 192 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 193 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·rpm·--quiet·-q·kernel;·then | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 167 | ····dnf·install·-y·"aide" | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 198 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 193 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 199 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 534, 33 lines modified | Offset 534, 14 lines modified | ||
| 534 | ············_\x8i_\x8s_\x8m······1446 | 534 | ············_\x8i_\x8s_\x8m······1446 |
| 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 539 | ············_\x8c_\x8i_\x8s······1.6.1 | 539 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 542 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 543 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 544 | rc=$? | ||
| 545 | if·test·"$rc"·=·127;·then | ||
| 546 | » echo·"$stderr_of_call"·>&2 | ||
| 547 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 548 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1039845/1045160 bytes (99.49%) of diff not shown. | |||
| Offset 15103, 213 lines modified | Offset 15103, 213 lines modified | ||
| 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | ||
| 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b050:·6961·7469·6f6e·204 | 0003b050:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b060:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b070:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b080:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b090:·6c61·7073·6522·2069·643d·2269·646d·3331··lapse"·id="idm31 | |||
| 0003b0a0:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b0b0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b0c0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b0d0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0e0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b0f0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b100:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b110:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b060:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b070:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b080:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b090:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b0a0:·2069·643d·2269·646d·3331·3837·223e·3c70···id="idm3187"><p | |||
| 0003b0b0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b0c0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b0d0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b0e0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b0f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b100:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b110:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b120:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b130:·6765·743d·2223·6964·6d33·3138·3822·2074··get="#idm3188"·t | |||
| 0003b140:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b150:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b160:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b170:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b180:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b190:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b1a0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1e0:·6964·3d22·6964·6d33·3138·3822·3e3c·7461··id="idm3188"><ta | |||
| 0003b1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b120:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b130:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b260:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b270:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003b140:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b150:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b160:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b | 0003b170:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003b2a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2e0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b2f0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b300:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b310:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b320:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b330:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b | 0003b180:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b190:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b1a0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003b1b0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003b1c0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003b1d0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003b1e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b1f0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b200:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b210:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b220:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b230:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b240:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b250:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b260:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b270:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b280:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b290:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b2a0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b2b0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b2c0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b2d0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b2e0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b2f0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b300:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b310:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003b320:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b330:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b340:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b350:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b360:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b370:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b380:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b390:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b3a0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3b0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3c0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3d0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b3f0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b400:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b410:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b420:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b430:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b440:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b460:·3d22·2369·646d·3331·3838·2220·7461·6269··="#idm3188"·tabi | |||
| 0003b470:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b480:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b490:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b4c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b4d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b4e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b4f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b500:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b510:·6c6c·6170·7365·2220·6964·3d22·6964·6d33··llapse"·id="idm3 | |||
| 0003b520:·3138·3822·3e3c·7072·653e·3c63·6f64·653e··188"><pre><code> | |||
| Max diff block lines reached; 22033629/22061671 bytes (99.87%) of diff not shown. | |||
| Offset 16002, 176 lines modified | Offset 16002, 176 lines modified | ||
| 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | ||
| 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e890:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e8a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e8b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e8c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e8d0:·6964·6d33·3436·3622·3e3c·7072·653e·3c63··idm3466"><pre><c | |||
| 0003e8e0:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003e8f0:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | |||
| 0003e900:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | |||
| 0003e910:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | |||
| 0003e920:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | |||
| 0003e930:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | |||
| 0003e | 0003e890:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e8a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003e8b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003e8c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003e8d0:·643d·2269·646d·3334·3636·223e·3c74·6162··d="idm3466"><tab | |||
| 0003e8e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e8f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e900:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e910:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e920:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e930:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e950:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e960:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e970:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e980:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e990:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e9a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e9b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003e9c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e9d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003e9e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003e9 | 0003e9f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003ea00:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | |||
| 0003ea10:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | |||
| 0003ea20:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | |||
| 0003e960:·6379·223e·4649·5053·3c2f·6162·6272·3e27··cy">FIPS</abbr>' | |||
| 0003e970:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003e980:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003e990:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003e9a0:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003e9b0:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003e9c0:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003e9d0:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003e9e0:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003e9f0:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003ea00:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003ea10:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003ea20:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003ea30:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003ea40:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003ea50:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003ea60:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003ea70:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003ea80:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003ea90:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003eaa0:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003eab0:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003eac0:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003ead0:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003eae0:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003eaf0:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003eb00:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003eb10:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003eb20:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 0003eb30:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 0003eb40:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 0003eb50:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003eb60:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 0003eb70:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003eb80:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 0003eb90:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003eba0:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 0003ebb0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ebc0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ebd0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ebe0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ebf0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ec00:·3d22·2369·646d·3334·3638·2220·7461·6269··="#idm3468"·tabi | |||
| 0003ec10:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ec20:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ec30:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ec40:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ec50:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ec60:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003ec70:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ec80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ec90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003eca0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ecb0:·3d22·6964·6d33·3436·3822·3e3c·7461·626c··="idm3468"><tabl | |||
| 0003ecc0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ecd0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ece0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ecf0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ed00:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ed10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ed20:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ed30:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ed40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ed50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ed60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ed70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ed80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ed90:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003eda0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003edb0:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003edc0:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | |||
| 0003e | 0003ea30:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003ede0:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | |||
| 0003e | 0003ea40:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | ||
| 0003ea50:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 0003ea60:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 0003ea70:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 0003ea80:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 0003ea90:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | |||
| 0003eaa0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | |||
| 0003eab0:·5053·3c2f·6162·6272·3e0a·2020·7461·6773··PS</abbr>.··tags | |||
| 0003eac0:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | |||
| Max diff block lines reached; 15191763/15214699 bytes (99.85%) of diff not shown. | |||
| Offset 229, 33 lines modified | Offset 229, 14 lines modified | ||
| 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 232 | ·····················FCS_TLSC_EXT.1 | 232 | ·····················FCS_TLSC_EXT.1 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 234 | ············_\x8c_\x8i_\x8s······1.6.1 | 234 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | var_system_crypto_policy='FIPS' | ||
| 238 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 239 | rc=$? | ||
| 240 | if·test·"$rc"·=·127;·then | ||
| 241 | » echo·"$stderr_of_call"·>&2 | ||
| 242 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 243 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 244 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 245 | » false··#·end·with·an·error·code | ||
| 246 | elif·test·"$rc"·!=·0;·then | ||
| 247 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 248 | » false··#·end·with·an·error·code | ||
| 249 | fi | ||
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 251 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 252 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 253 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 254 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 255 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 241 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 256 | ··set_fact: | 242 | ··set_fact: |
| Offset 300, 14 lines modified | Offset 281, 33 lines modified | ||
| 300 | ··-·PCI-DSSv4-2.2.7 | 281 | ··-·PCI-DSSv4-2.2.7 |
| 301 | ··-·configure_crypto_policy | 282 | ··-·configure_crypto_policy |
| 302 | ··-·high_severity | 283 | ··-·high_severity |
| 303 | ··-·low_complexity | 284 | ··-·low_complexity |
| 304 | ··-·low_disruption | 285 | ··-·low_disruption |
| 305 | ··-·no_reboot_needed | 286 | ··-·no_reboot_needed |
| 306 | ··-·restrict_strategy | 287 | ··-·restrict_strategy |
| 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 289 | var_system_crypto_policy='FIPS' | ||
| 290 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 291 | rc=$? | ||
| 292 | if·test·"$rc"·=·127;·then | ||
| 293 | » echo·"$stderr_of_call"·>&2 | ||
| 294 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 295 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 296 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 297 | » false··#·end·with·an·error·code | ||
| 298 | elif·test·"$rc"·!=·0;·then | ||
| 299 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 300 | » false··#·end·with·an·error·code | ||
| 301 | fi | ||
| 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 308 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 303 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 309 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 304 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 310 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 305 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 311 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 306 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 312 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 307 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 313 | ············expectations,·and·makes·system·configuration·more·fragmented. | 308 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 318, 19 lines modified | Offset 318, 14 lines modified | ||
| 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 323 | ············_\x8c_\x8i_\x8s······1.6.2 | 323 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 327 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 333 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 330 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 334 | ··lineinfile: | 331 | ··lineinfile: |
| Offset 348, 14 lines modified | Offset 343, 19 lines modified | ||
| 348 | ··-·PCI-DSSv4-2.2.7 | 343 | ··-·PCI-DSSv4-2.2.7 |
| 349 | ··-·configure_ssh_crypto_policy | 344 | ··-·configure_ssh_crypto_policy |
| 350 | ··-·disable_strategy | 345 | ··-·disable_strategy |
| 351 | ··-·low_complexity | 346 | ··-·low_complexity |
| 352 | ··-·medium_disruption | 347 | ··-·medium_disruption |
| 353 | ··-·medium_severity | 348 | ··-·medium_severity |
| 354 | ··-·reboot_required | 349 | ··-·reboot_required |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 352 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 355 | Group ·Disk·Partitioning· Group·contains·1·rule | 353 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 356 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should | 354 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should |
| 357 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 355 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 358 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 356 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 359 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 357 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 360 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 358 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 361 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 359 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 599, 23 lines modified | Offset 599, 14 lines modified | ||
| 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db | 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db |
| 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 607 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 608 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel;·};·then | ||
| 609 | dconf·update | ||
| 610 | else | ||
| 611 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 612 | fi | ||
| 613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 1139581/1145425 bytes (99.49%) of diff not shown. | |||
| Offset 15847, 213 lines modified | Offset 15847, 213 lines modified | ||
| 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | ||
| 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ded0:·6d65·6469·6174·696f·6e20·4 | 0003ded0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003dee0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003def0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003df00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003df10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003df20:·6d33·3138·3722·3e3c·7461·626c·6520·636c··m3187"><table·cl | |||
| 0003df30:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003df40:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003df50:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003df60:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003df70:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003df80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003df90:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003dee0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003def0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003df00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003df10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003df20:·7365·2220·6964·3d22·6964·6d33·3138·3722··se"·id="idm3187" | |||
| 0003df30:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003df40:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003df50:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003df60:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003df70:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003df80:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003df90:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003dfa0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003dfb0:·7461·7267·6574·3d22·2369·646d·3331·3838··target="#idm3188 | |||
| 0003dfc0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003dfd0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003dfe0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003dff0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003e000:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003e010:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e020:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003e030:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003e040:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003e050:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003e060:·6522·2069·643d·2269·646d·3331·3838·223e··e"·id="idm3188"> | |||
| 0003e070:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e080:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e090:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e0a0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e0b0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003 | 0003dfa0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003 | 0003dfb0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003e0e0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e0f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003 | 0003dfc0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003dfd0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003dfe0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003 | 0003dff0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003e120:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e130:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e140:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003e150:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e160:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003e170:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003e180:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003e190:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003e1a0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003e1b0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003e | 0003e000:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003e010:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003e020:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003e030:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003e040:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003e050:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003e060:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003e070:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003e080:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003e090:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003e0a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003e0b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003e0c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003e0d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003e0e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003e0f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003e100:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003e110:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003e120:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003e130:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003e140:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003e150:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003e160:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003e170:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003e180:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003e190:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003e1a0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003e1b0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003e1c0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003e1d0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003e1e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003e1f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003e200:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003e210:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003e220:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003e230:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003e240:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003e250:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003e260:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003e270:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003e280:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003e290:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003e2a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003e2b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003e2c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003e2d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003e2e0:·6765·743d·2223·6964·6d33·3138·3822·2074··get="#idm3188"·t | |||
| 0003e2f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003e300:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003e310:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003e320:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003e330:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003e340:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e350:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003e360:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003e370:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003e380:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003e390:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003e3a0:·646d·3331·3838·223e·3c70·7265·3e3c·636f··dm3188"><pre><co | |||
| Max diff block lines reached; 14696560/14724602 bytes (99.81%) of diff not shown. | |||
| Offset 187, 53 lines modified | Offset 187, 14 lines modified | ||
| 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 192 | ············_\x8c_\x8i_\x8s············6.1.1 | 192 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [[packages]] | ||
| 196 | name·=·"aide" | ||
| 197 | version·=·"*" | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | include·install_aide | ||
| 204 | class·install_aide·{ | ||
| 205 | ··package·{·'aide': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·rpm·--quiet·-q·kernel;·then | ||
| 216 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 217 | ····dnf·install·-y·"aide" | ||
| 218 | fi | ||
| 219 | else | ||
| 220 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 221 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 227 | package·--add=aide | ||
| 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 229 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 230 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 231 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 232 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 233 | -·name:·Gather·the·package·facts | 199 | -·name:·Gather·the·package·facts |
| 234 | ··package_facts: | 200 | ··package_facts: |
| Offset 262, 14 lines modified | Offset 223, 53 lines modified | ||
| 262 | ··-·PCI-DSSv4-11.5.2 | 223 | ··-·PCI-DSSv4-11.5.2 |
| 263 | ··-·enable_strategy | 224 | ··-·enable_strategy |
| 264 | ··-·low_complexity | 225 | ··-·low_complexity |
| 265 | ··-·low_disruption | 226 | ··-·low_disruption |
| 266 | ··-·medium_severity | 227 | ··-·medium_severity |
| 267 | ··-·no_reboot_needed | 228 | ··-·no_reboot_needed |
| 268 | ··-·package_aide_installed | 229 | ··-·package_aide_installed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 231 | [[packages]] | ||
| 232 | name·=·"aide" | ||
| 233 | version·=·"*" | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 239 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 240 | if·rpm·--quiet·-q·kernel;·then | ||
| 241 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 242 | ····dnf·install·-y·"aide" | ||
| 243 | fi | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 252 | include·install_aide | ||
| 253 | class·install_aide·{ | ||
| 254 | ··package·{·'aide': | ||
| 255 | ····ensure·=>·'installed', | ||
| 256 | ··} | ||
| 257 | } | ||
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 263 | package·--add=aide | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | Run·the·following·command·to·generate·a·new·database: | 265 | Run·the·following·command·to·generate·a·new·database: |
| 271 | $·sudo·/usr/sbin/aide·--init | 266 | $·sudo·/usr/sbin/aide·--init |
| 272 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ | 267 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ |
| 273 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides | 268 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides |
| 274 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 269 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 275 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 270 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 590, 33 lines modified | Offset 590, 14 lines modified | ||
| 590 | ············_\x8i_\x8s_\x8m······1446 | 590 | ············_\x8i_\x8s_\x8m······1446 |
| 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 595 | ············_\x8c_\x8i_\x8s······1.6.1 | 595 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 598 | var_system_crypto_policy='DEFAULT' | ||
| 599 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 600 | rc=$? | ||
| 601 | if·test·"$rc"·=·127;·then | ||
| 602 | » echo·"$stderr_of_call"·>&2 | ||
| 603 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 604 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1361965/1367273 bytes (99.61%) of diff not shown. | |||
| Offset 15457, 134 lines modified | Offset 15457, 134 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003c680:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c690:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c6a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c760:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | |||
| 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7c0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c7d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c7e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c | 0003c6b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003c800:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003c810:·3336·3622·3e3c·7461·626c·6520·636c·6173··366"><table·clas | |||
| 0003c820:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c830:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c840:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c850:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c | 0003c6c0:·643d·2269·646d·3133·3635·223e·3c74·6162··d="idm1365"><tab | ||
| 0003c6d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c6e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c6f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c700:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c710:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c720:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c730:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c740:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c | 0003c750:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003c880:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c | 0003c760:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c770:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c | 0003c780:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c8b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c8c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c8d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c8e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c8f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c900:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c910:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003c920:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c930:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c940:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c950:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c | 0003c790:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c7a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c7b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003c7d0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003c7e0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003c7f0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003c800:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003c810:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c820:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003c830:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c840:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c850:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c860:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c870:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c880:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c890:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c8a0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c8b0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c8c0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c8d0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c8e0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003c8f0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003c900:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003c910:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003c920:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003c930:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003c940:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003c950:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003c960:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c970:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003c980:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c990:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c9a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c9b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c9c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c9d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c9e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c9f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ca00:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ca10:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ca20:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003ca30:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003ca40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ca50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ca60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ca70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ca80:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003ca90:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003caa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003cab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003cac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003cad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003cae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003caf0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003cb00:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003cb10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003cb20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003cb30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003cb40:·6964·3d22·6964·6d31·3336·3622·3e3c·7072··id="idm1366"><pr | |||
| 0003cb50:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| Max diff block lines reached; 2602166/2619306 bytes (99.35%) of diff not shown. | |||
| Offset 158, 31 lines modified | Offset 158, 14 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | -·name:·Gather·the·package·facts | 170 | -·name:·Gather·the·package·facts |
| 186 | ··package_facts: | 171 | ··package_facts: |
| Offset 211, 14 lines modified | Offset 194, 31 lines modified | ||
| 211 | ··-·PCI-DSSv4-11.5.2 | 194 | ··-·PCI-DSSv4-11.5.2 |
| 212 | ··-·enable_strategy | 195 | ··-·enable_strategy |
| 213 | ··-·low_complexity | 196 | ··-·low_complexity |
| 214 | ··-·low_disruption | 197 | ··-·low_disruption |
| 215 | ··-·medium_severity | 198 | ··-·medium_severity |
| 216 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 217 | ··-·package_aide_installed | 200 | ··-·package_aide_installed |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | [[packages]] | ||
| 203 | name·=·"aide" | ||
| 204 | version·=·"*" | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | include·install_aide | ||
| 211 | class·install_aide·{ | ||
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 217 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 220 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 218 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 221 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 219 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 222 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 220 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 223 | crontab: | 221 | crontab: |
| 224 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 222 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 33 lines modified | Offset 431, 14 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 458 | ··set_fact: | 444 | ··set_fact: |
| Offset 502, 14 lines modified | Offset 483, 33 lines modified | ||
| 502 | ··-·PCI-DSSv4-2.2.7 | 483 | ··-·PCI-DSSv4-2.2.7 |
| 503 | ··-·configure_crypto_policy | 484 | ··-·configure_crypto_policy |
| 504 | ··-·high_severity | 485 | ··-·high_severity |
| 505 | ··-·low_complexity | 486 | ··-·low_complexity |
| 506 | ··-·low_disruption | 487 | ··-·low_disruption |
| 507 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 508 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 287448/292766 bytes (98.18%) of diff not shown. | |||
| Offset 15048, 134 lines modified | Offset 15048, 134 lines modified | ||
| 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | ||
| 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ace0:·5265·6d65·6469·6174·696f·6e20·4 | 0003ace0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003acf0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003ad00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ad10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ad20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ad30:·6964·6d31·3336·3522·3e3c·7461·626c·6520··idm1365"><table· | |||
| 0003ad40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ad50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ad60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ad70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ad80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ad90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ada0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003acf0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003ad00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ad10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ad20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ad30:·6170·7365·2220·6964·3d22·6964·6d31·3336··apse"·id="idm136 | |||
| 0003ad40:·3522·3e3c·7072·653e·3c63·6f64·653e·0a5b··5"><pre><code>.[ | |||
| 0003ad50:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003ad60:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003ad70:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003ad80:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ad90:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ada0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003adb0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003adc0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003add0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003ade0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003adf0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ae00:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ae10:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ae20:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003ae30:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003ae40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae70:·7073·6522·2069·643d·2269·646d·3133·3636··pse"·id="idm1366 | |||
| 0003ae80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aea0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003aeb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003aec0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a | 0003adb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003a | 0003adc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003aef0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003a | 0003add0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ade0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a | 0003adf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003a | 0003ae00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003af30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003af40:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af50:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af60:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af70:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003af80:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003af90:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003afa0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003afb0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003afc0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003a | 0003ae10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003ae20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ae30:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003ae40:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003ae50:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003ae60:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003ae70:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003ae80:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003ae90:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003aea0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003aeb0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003aec0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003aed0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003aee0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003aef0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003af00:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003af10:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003af20:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003af30:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003af40:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003af50:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003af60:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003af70:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003af80:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003af90:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003afa0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003afb0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003afc0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003afd0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003afe0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003aff0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b000:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b010:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b020:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b030:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b040:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b050:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b060:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b070:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b080:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b090:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b0a0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b0b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b0c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b0d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b0f0:·6172·6765·743d·2223·6964·6d31·3336·3622··arget="#idm1366" | |||
| 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b160:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b170:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b180:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b190:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1b0:·2269·646d·3133·3636·223e·3c70·7265·3e3c··"idm1366"><pre>< | |||
| 0003b1c0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| Max diff block lines reached; 3112558/3129698 bytes (99.45%) of diff not shown. | |||
| Offset 114, 31 lines modified | Offset 114, 14 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 127 | ··package_facts: |
| Offset 167, 14 lines modified | Offset 150, 31 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 152 | ··-·low_complexity |
| 170 | ··-·low_disruption | 153 | ··-·low_disruption |
| 171 | ··-·medium_severity | 154 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 173 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 176 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 174 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 175 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 176 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 179 | crontab: | 177 | crontab: |
| 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 178 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 33 lines modified | Offset 387, 14 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 414 | ··set_fact: | 400 | ··set_fact: |
| Offset 458, 14 lines modified | Offset 439, 33 lines modified | ||
| 458 | ··-·PCI-DSSv4-2.2.7 | 439 | ··-·PCI-DSSv4-2.2.7 |
| 459 | ··-·configure_crypto_policy | 440 | ··-·configure_crypto_policy |
| 460 | ··-·high_severity | 441 | ··-·high_severity |
| 461 | ··-·low_complexity | 442 | ··-·low_complexity |
| 462 | ··-·low_disruption | 443 | ··-·low_disruption |
| 463 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 464 | ··-·restrict_strategy | 445 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 465 | Group ·Updating·Software· Group·contains·1·rule | 460 | Group ·Updating·Software· Group·contains·1·rule |
| 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 342890/348073 bytes (98.51%) of diff not shown. | |||
| Offset 15457, 133 lines modified | Offset 15457, 133 lines modified | ||
| 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | ||
| 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c670:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c6b0:·6522·2069·643d·2269·646d·3133·3635·223e··e"·id="idm1365"> | |||
| 0003c6c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c6d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c6e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c6f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c700:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c710:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c730:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c670:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c680:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c690:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c6a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c6b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c6c0:·2269·646d·3133·3635·223e·3c70·7265·3e3c··"idm1365"><pre>< | |||
| 0003c6d0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c6e0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c6f0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c700:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c710:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c720:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c730:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c750:·2223·6964·6d31·3336·3622·2074·6162·696e··"#idm1366"·tabin | |||
| 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c7c0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c7d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c7e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c7f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c800:·6964·6d31·3336·3622·3e3c·7461·626c·6520··idm1366"><table· | |||
| 0003c810:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c820:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c830:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c840:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c850:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c | 0003c740:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003c | 0003c750:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003c | 0003c760:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003c | 0003c770:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003c | 0003c780:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003c | 0003c790:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003c8c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c8d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c8e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c8f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c900:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003c910:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003c920:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003c930:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003c940:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003c | 0003c7a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c7b0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c7c0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003c7d0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003c7e0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003c7f0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003c800:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c810:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c820:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c830:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c840:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c850:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c860:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c870:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c880:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c890:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c8a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c8b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c8c0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c8d0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003c8e0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c8f0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c900:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c910:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c920:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c930:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c940:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c950:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003c960:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c970:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c980:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c990:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c9a0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c9b0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c9c0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c9d0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c9e0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c9f0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ca00:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ca10:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003ca20:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003ca30:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ca40:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ca50:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ca60:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ca70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ca80:·646d·3133·3636·2220·7461·6269·6e64·6578··dm1366"·tabindex | |||
| 0003ca90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003caa0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003cab0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003cac0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003cad0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003cae0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003caf0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003cb00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003cb10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003cb20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003cb30:·7365·2220·6964·3d22·6964·6d31·3336·3622··se"·id="idm1366" | |||
| 0003cb40:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003cb50:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003cb60:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| Max diff block lines reached; 2602718/2619720 bytes (99.35%) of diff not shown. | |||
| Offset 158, 31 lines modified | Offset 158, 14 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | -·name:·Gather·the·package·facts | 170 | -·name:·Gather·the·package·facts |
| 186 | ··package_facts: | 171 | ··package_facts: |
| Offset 211, 14 lines modified | Offset 194, 31 lines modified | ||
| 211 | ··-·PCI-DSSv4-11.5.2 | 194 | ··-·PCI-DSSv4-11.5.2 |
| 212 | ··-·enable_strategy | 195 | ··-·enable_strategy |
| 213 | ··-·low_complexity | 196 | ··-·low_complexity |
| 214 | ··-·low_disruption | 197 | ··-·low_disruption |
| 215 | ··-·medium_severity | 198 | ··-·medium_severity |
| 216 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 217 | ··-·package_aide_installed | 200 | ··-·package_aide_installed |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | [[packages]] | ||
| 203 | name·=·"aide" | ||
| 204 | version·=·"*" | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | include·install_aide | ||
| 211 | class·install_aide·{ | ||
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 217 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 220 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 218 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 221 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 219 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 222 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 220 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 223 | crontab: | 221 | crontab: |
| 224 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 222 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 33 lines modified | Offset 431, 14 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 458 | ··set_fact: | 444 | ··set_fact: |
| Offset 502, 14 lines modified | Offset 483, 33 lines modified | ||
| 502 | ··-·PCI-DSSv4-2.2.7 | 483 | ··-·PCI-DSSv4-2.2.7 |
| 503 | ··-·configure_crypto_policy | 484 | ··-·configure_crypto_policy |
| 504 | ··-·high_severity | 485 | ··-·high_severity |
| 505 | ··-·low_complexity | 486 | ··-·low_complexity |
| 506 | ··-·low_disruption | 487 | ··-·low_disruption |
| 507 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 508 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 287445/292763 bytes (98.18%) of diff not shown. | |||
| Offset 15047, 134 lines modified | Offset 15047, 134 lines modified | ||
| 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003ace0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003acf0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ad00:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ace0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003acf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ad00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ad10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ad20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ad30:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003ad40:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad50:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad60:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad70:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad80:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad90:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ada0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003adb0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003adc0:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | |||
| 0003add0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ade0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003adf0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ae00:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ae10:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ae20:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003ae30:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae40:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a | 0003ad10:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003ae60:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ae70:·3336·3622·3e3c·7461·626c·6520·636c·6173··366"><table·clas | |||
| 0003ae80:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae90:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003aea0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003aeb0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a | 0003ad20:·643d·2269·646d·3133·3635·223e·3c74·6162··d="idm1365"><tab | ||
| 0003ad30:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad40:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad50:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad60:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad70:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ada0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a | 0003adb0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003aee0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003adc0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003add0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a | 0003ade0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003af10:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003af20:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003af30:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003af40:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003af50:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003af60:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003af70:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003af80:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003af90:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003afa0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003afb0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003a | 0003adf0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003ae00:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ae10:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ae20:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003ae30:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003ae40:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ae50:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003ae60:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae70:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003ae80:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003ae90:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003aea0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003aeb0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003aec0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003aed0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003aee0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003aef0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003af00:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003af10:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003af20:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003af30:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003af40:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af50:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003af60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003af70:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003af80:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003af90:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003afa0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003afb0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003afc0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003afd0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003afe0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003aff0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b000:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b010:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b020:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b030:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b040:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b050:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b060:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b070:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b080:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b090:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b0a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b0b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b0c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b0d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b0e0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003b0f0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003b100:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b110:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b120:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b130:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b140:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b150:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b160:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b170:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b180:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b190:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1a0:·6964·3d22·6964·6d31·3336·3622·3e3c·7072··id="idm1366"><pr | |||
| 0003b1b0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| Max diff block lines reached; 3111523/3128663 bytes (99.45%) of diff not shown. | |||
| Offset 114, 31 lines modified | Offset 114, 14 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 127 | ··package_facts: |
| Offset 167, 14 lines modified | Offset 150, 31 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 152 | ··-·low_complexity |
| 170 | ··-·low_disruption | 153 | ··-·low_disruption |
| 171 | ··-·medium_severity | 154 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 173 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 176 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 174 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 175 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 176 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 179 | crontab: | 177 | crontab: |
| 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 178 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 33 lines modified | Offset 387, 14 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 414 | ··set_fact: | 400 | ··set_fact: |
| Offset 458, 14 lines modified | Offset 439, 33 lines modified | ||
| 458 | ··-·PCI-DSSv4-2.2.7 | 439 | ··-·PCI-DSSv4-2.2.7 |
| 459 | ··-·configure_crypto_policy | 440 | ··-·configure_crypto_policy |
| 460 | ··-·high_severity | 441 | ··-·high_severity |
| 461 | ··-·low_complexity | 442 | ··-·low_complexity |
| 462 | ··-·low_disruption | 443 | ··-·low_disruption |
| 463 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 464 | ··-·restrict_strategy | 445 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 465 | Group ·Updating·Software· Group·contains·1·rule | 460 | Group ·Updating·Software· Group·contains·1·rule |
| 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 342883/348066 bytes (98.51%) of diff not shown. | |||
| Offset 15320, 283 lines modified | Offset 15320, 283 lines modified | ||
| 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | ||
| 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003bdf0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003be00:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003be10:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bdf0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003be00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003be10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003be20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be40:·3830·3132·223e·3c70·7265·3e3c·636f·6465··8012"><pre><code | |||
| 0003be50:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003be60:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003be70:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003be80:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003be90:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bea0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003beb0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bec0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bed0:·6d38·3031·3322·2074·6162·696e·6465·783d··m8013"·tabindex= | |||
| 0003bee0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bef0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bf00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bf10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bf20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bf30:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bf40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bf50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003be20:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bf70:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bf80:·3031·3322·3e3c·7461·626c·6520·636c·6173··013"><table·clas | |||
| 0003bf90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bfa0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bfb0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bfc0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003be30:·643d·2269·646d·3830·3132·223e·3c74·6162··d="idm8012"><tab | ||
| 0003be40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003be50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003be60:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003be70:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003be80:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003be90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bea0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003beb0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003bec0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003bff0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003 | 0003bed0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003bee0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003 | 0003bef0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c020:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c030:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c040:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c050:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c060:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003 | 0003bf00:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003bf10:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bf20:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bf30:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003bf40:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003bf50:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003bf60:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003bf70:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003bf80:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003bf90:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003bfa0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003bfb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bfc0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003bfd0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003bfe0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003bff0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c000:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c010:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c020:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c030:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c040:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c050:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c060:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003c070:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c080:·6 | 0003c080:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | ||
| 0003c090:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c0a0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c0b0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c0c0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c0 | 0003c090:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | ||
| 0003c0a0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c0b0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c0c0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003c0d0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003c0e0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003c0f0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003c100:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003c110:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003c120:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003c130:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c140:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c150:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c160:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c170:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c180:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c190:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c1a0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c1b0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c1c0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c1d0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c | 0003c1e0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | ||
| 0003c | 0003c1f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003c | 0003c200:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003c | 0003c210:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003c | 0003c220:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003c | 0003c230:·6574·3d22·2369·646d·3830·3133·2220·7461··et="#idm8013"·ta | ||
| 0003c | 0003c240:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c | 0003c250:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c | 0003c260:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c | 0003c270:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c | 0003c280:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c | 0003c290:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c | 0003c2a0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003c | 0003c2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c | 0003c2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c | 0003c2d0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | ||
| 0003c | 0003c2e0:·3133·223e·3c74·6162·6c65·2063·6c61·7373··13"><table·class | ||
| Max diff block lines reached; 22844279/22881981 bytes (99.84%) of diff not shown. | |||
| Offset 15326, 282 lines modified | Offset 15326, 282 lines modified | ||
| 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | ||
| 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003be40:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003be50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003be60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003be70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003be80:·2220·6964·3d22·6964·6d38·3031·3222·3e3c··"·id="idm8012">< | |||
| 0003be90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bea0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003beb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bec0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bed0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bee0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bf00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003be40:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003be50:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003be60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003be70:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003be80:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be90:·6964·6d38·3031·3222·3e3c·7072·653e·3c63··idm8012"><pre><c | |||
| 0003bea0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003beb0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bec0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bed0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bee0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bef0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bf00:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bf10:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bf20:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | |||
| 0003bf30:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bf40:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bf50:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bf60:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bf70:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bf80:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003bf90:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003bfa0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bfb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bfc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bfd0:·646d·3830·3133·223e·3c74·6162·6c65·2063··dm8013"><table·c | |||
| 0003bfe0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bff0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c000:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c010:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c020:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003 | 0003bf10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003c040:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003 | 0003bf20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bf30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003 | 0003bf40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c070:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c080:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c090:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c0a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c0b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c0c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c0d0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003c0e0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003c0f0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003c100:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003c110:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003 | 0003bf50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003bf60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bf70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bf80:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003bf90:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003bfa0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003bfb0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003bfc0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003bfd0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003bfe0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bff0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003c000:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003c010:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c020:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c030:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c040:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c050:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c060:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c070:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c080:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c090:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c0a0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c0b0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c0c0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003c0d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003c0e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003c0f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003c100:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003c110:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003c120:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003c130:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003c140:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c150:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003c160:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003c170:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003c180:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003c190:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003c1a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003c1b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003c1c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c1d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c1e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c1f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c200:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c210:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c220:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c | 0003c230:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | ||
| 0003c | 0003c240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003c | 0003c250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003c | 0003c260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003c | 0003c270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003c | 0003c280:·6172·6765·743d·2223·6964·6d38·3031·3322··arget="#idm8013" | ||
| 0003c | 0003c290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c | 0003c2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c | 0003c2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c | 0003c2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c | 0003c2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c | 0003c2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c | 0003c2f0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | ||
| 0003c | 0003c300:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| Max diff block lines reached; 23134547/23172111 bytes (99.84%) of diff not shown. | |||
| Offset 15316, 283 lines modified | Offset 15316, 283 lines modified | ||
| 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bda0:·5265·6d65·6469·6174·696f·6e20·4 | 0003bda0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003bdb0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003bdc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bdd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bde0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bdf0:·6964·6d38·3031·3222·3e3c·7461·626c·6520··idm8012"><table· | |||
| 0003be00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003be10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003be20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003be30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003be40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003be50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003be60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bdb0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003bdc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bdd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bde0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bdf0:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003be00:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003be10:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003be20:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003be30:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003be40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003be50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003be60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003be70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003be80:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003be90:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0003bea0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003beb0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bec0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bed0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bee0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bef0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bf00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bf10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bf20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bf30:·7073·6522·2069·643d·2269·646d·3830·3133··pse"·id="idm8013 | |||
| 0003bf40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bf60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bf70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bf80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003be70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003be80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003bfb0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003be90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003bea0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003beb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003bec0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003bff0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c000:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c010:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c020:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c030:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003c040:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003c050:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c060:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c070:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003c080:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003 | 0003bed0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003bee0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bef0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003bf00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003bf10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003bf20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003bf30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003bf40:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bf50:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bf60:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bf70:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bf80:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bf90:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bfa0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bfb0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bfc0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bfd0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bfe0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bff0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c000:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c010:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c020:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c030:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c040:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c050:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c060:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c070:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c080:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c090:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c0a0:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c0b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c0c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c0d0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c0e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c0f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c100:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c110:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c120:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c130:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c140:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c150:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c160:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c170:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c180:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c190:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c | 0003c1a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003c | 0003c1b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003c | 0003c1c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c | 0003c1d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c | 0003c1e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c | 0003c1f0:·2223·6964·6d38·3031·3322·2074·6162·696e··"#idm8013"·tabin | ||
| 0003c | 0003c200:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c | 0003c210:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c | 0003c220:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c | 0003c230:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c140:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c150:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003c160:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c170:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c180:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| Max diff block lines reached; 9841794/9879496 bytes (99.62%) of diff not shown. | |||
| Offset 147, 60 lines modified | Offset 147, 14 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·rpm·--quiet·-q·kernel;·then | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 177 | ····yum·install·-y·"aide" | ||
| 178 | fi | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 200 | ··package_facts: | 160 | ··package_facts: |
| Offset 238, 14 lines modified | Offset 192, 60 lines modified | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 243 | package·install·aide | 197 | package·install·aide |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | [[packages]] | ||
| 200 | name·=·"aide" | ||
| 201 | version·=·"*" | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·rpm·--quiet·-q·kernel;·then | ||
| 209 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 210 | ····yum·install·-y·"aide" | ||
| 211 | fi | ||
| 212 | else | ||
| 213 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 214 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 220 | dnf·install·aide | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 226 | include·install_aide | ||
| 227 | class·install_aide·{ | ||
| 228 | ··package·{·'aide': | ||
| 229 | ····ensure·=>·'installed', | ||
| 230 | ··} | ||
| 231 | } | ||
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 237 | package·--add=aide | ||
| 244 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 245 | Run·the·following·command·to·generate·a·new·database: | 239 | Run·the·following·command·to·generate·a·new·database: |
| 246 | $·sudo·/usr/sbin/aide·--init | 240 | $·sudo·/usr/sbin/aide·--init |
| 247 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 241 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 248 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 242 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 249 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 243 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 250 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 244 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 271, 28 lines modified | Offset 271, 14 lines modified | ||
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 275 | ············_\x8c_\x8i_\x8s············5.3.1 | 275 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1123879/1128761 bytes (99.57%) of diff not shown. | |||
| Offset 14991, 294 lines modified | Offset 14991, 294 lines modified | ||
| 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | ||
| 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a950:·6d65·6469·6174·696f·6e20·4 | 0003a950:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003a960:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003a970:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a980:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a990:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a9a0:·7365·2220·6964·3d22·6964·6d31·3332·3531··se"·id="idm13251 | |||
| 0003a9b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003a9 | 0003a960:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003a970:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003a980:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003a990:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003a9a0:·6d31·3332·3531·223e·3c74·6162·6c65·2063··m13251"><table·c | |||
| 0003a9b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a9c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a9d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a9e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a9f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aa00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aa10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aa20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aa30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aa40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003aa50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003aa60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003aa70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003aa80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003aa90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003aaa0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003aab0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003aac0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003aad0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003aae0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aaf0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003ab00:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ab10:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ab20:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ab30:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ab40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ab50:·202d·2070·6163·6b61·6765·5f64·6e66·2d61···-·package_dnf-a | |||
| 0003ab60:·7574·6f6d·6174·6963·5f69·6e73·7461·6c6c··utomatic_install | |||
| 0003ab70:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003ab80:·7265·2064·6e66·2d61·7574·6f6d·6174·6963··re·dnf-automatic | |||
| 0003ab90:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003aba0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003a | 0003abb0:·653a·2064·6e66·2d61·7574·6f6d·6174·6963··e:·dnf-automatic | ||
| 0003a | 0003abc0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | ||
| 0003abd0:·656e·740a·2020·7768·656e·3a20·6e6f·7420··ent.··when:·not· | |||
| 0003abe0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | |||
| 0003abf0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003ac00:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | |||
| 0003ac10:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | |||
| 0003ac20:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | |||
| 0003ac30:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | |||
| 0003ac40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003ac50:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | |||
| 0003ac60:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | |||
| 0003ac70:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | |||
| 0003ac80:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | |||
| 0003ac90:·2020·2020·290a·2020·7461·6773·3a0a·2020······).··tags:.·· | |||
| 0003aca0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003acb0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003acc0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003acd0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ace0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003acf0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ad00:·0a20·202d·2070·6163·6b61·6765·5f64·6e66··.··-·package_dnf | |||
| 0003ad10:·2d61·7574·6f6d·6174·6963·5f69·6e73·7461··-automatic_insta | |||
| 0003ad20:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003ad30:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ad40:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ad50:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ad60:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ad70:·6172·6765·743d·2223·6964·6d31·3332·3532··arget="#idm13252 | |||
| 0003ad80:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad90:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ada0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003adb0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003adc0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003add0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ade0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003adf0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae20:·646d·3133·3235·3222·3e3c·7461·626c·6520··dm13252"><table· | |||
| 0003ae30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ae40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ae50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ae60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ae70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ae80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003aea0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003aeb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003aed0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003aee0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003aef0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003af00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003af10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003af20:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003af30:·6c20·646e·662d·6175·746f·6d61·7469·630a··l·dnf-automatic. | |||
| 0003a | 0003af40:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003a | 0003af50:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003a | 0003af60:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003a | 0003af70:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003a | 0003af80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a | 0003af90:·3d22·2369·646d·3133·3235·3322·2074·6162··="#idm13253"·tab | ||
| 0003a | 0003afa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a | 0003afb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a | 0003afc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a | 0003afd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a | 0003afe0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a | 0003aff0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b000:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003aab0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003aac0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aad0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aae0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aaf0:·3d22·6964·6d31·3332·3532·223e·3c74·6162··="idm13252"><tab | |||
| 0003ab00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| Max diff block lines reached; 3376342/3415562 bytes (98.85%) of diff not shown. | |||
| Offset 112, 31 lines modified | Offset 112, 57 lines modified | ||
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | -·name:·Gather·the·package·facts | ||
| 125 | ··package_facts: | ||
| 126 | ····manager:·auto | ||
| 127 | ··tags: | ||
| 128 | ··-·enable_strategy | ||
| 129 | ··-·low_complexity | ||
| 130 | ··-·low_disruption | ||
| 131 | ··-·medium_severity | ||
| 132 | ··-·no_reboot_needed | ||
| 133 | ··-·package_dnf-automatic_installed | ||
| 120 | 134 | -·name:·Ensure·dnf-automatic·is·installed | |
| 135 | ··package: | ||
| 121 | name | 136 | ····name:·dnf-automatic |
| 122 | 137 | ····state:·present | |
| 138 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 139 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 140 | ansible_facts.packages | ||
| 141 | ····) | ||
| 142 | ··tags: | ||
| 143 | ··-·enable_strategy | ||
| 144 | ··-·low_complexity | ||
| 145 | ··-·low_disruption | ||
| 146 | ··-·medium_severity | ||
| 147 | ··-·no_reboot_needed | ||
| 148 | ··-·package_dnf-automatic_installed | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_dnf-automatic | ||
| 129 | c | 154 | package·install·dnf-automatic |
| 130 | ··package·{·'dnf-automatic': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | 155 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 156 | [[packages]] | ||
| 157 | name·=·"dnf-automatic" | ||
| 158 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | 164 | #·Remediation·is·applicable·only·in·certain·platforms |
| 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 165 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 145, 66 lines modified | Offset 171, 40 lines modified | ||
| 145 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 171 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 146 | ····yum·install·-y·"dnf-automatic" | 172 | ····yum·install·-y·"dnf-automatic" |
| 147 | fi | 173 | fi |
| 148 | else | 174 | else |
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 150 | fi | 176 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=dnf-automatic | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | dnf·install·dnf-automatic | 182 | dnf·install·dnf-automatic |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_dnf-automatic | ||
| 168 | -·name:·Gather·the·package·facts | ||
| 169 | ··package_facts: | ||
| 170 | ····manager:·auto | ||
| 171 | ··tags: | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_dnf-automatic_installed | ||
| 189 | class·install_dnf-automatic·{ | ||
| 190 | ··package·{·'dnf-automatic': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 178 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 179 | ··package: | ||
| 180 | ····name:·dnf-automatic | ||
| 181 | ····state:·present | ||
| 182 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 183 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 184 | ansible_facts.packages | ||
| 185 | ····) | ||
| 186 | ··tags: | ||
| 187 | ··-·enable_strategy | ||
| 188 | ··-·low_complexity | ||
| 189 | ··-·low_disruption | ||
| 190 | ··-·medium_severity | ||
| 191 | ··-·no_reboot_needed | ||
| 192 | ··-·package_dnf-automatic_installed | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | package· | 199 | package·--add=dnf-automatic |
| Max diff block lines reached; 245152/250092 bytes (98.02%) of diff not shown. | |||
| Offset 15373, 282 lines modified | Offset 15373, 282 lines modified | ||
| 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c130:·656d·6564·6961·7469·6f6e·204 | 0003c130:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c140:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c180:·646d·3830·3132·223e·3c74·6162·6c65·2063··dm8012"><table·c | |||
| 0003c190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c1c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c1d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c1e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c1f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c140:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003c150:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c160:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c170:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c180:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003c190:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003c1a0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003c1b0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003c1c0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003c1d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c1e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c1f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c200:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c210:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003c220:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003c230:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c240:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c250:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c260:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c270:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c280:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003c290:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c2a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c2b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c2c0:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c2d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c2e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c2f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c300:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c310:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c | 0003c200:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003c | 0003c210:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003c340:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c | 0003c220:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003c230:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c | 0003c240:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003c | 0003c250:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003c380:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c390:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c3a0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c3b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c3c0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003c3d0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003c3e0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003c3f0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003c400:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003c410:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003c | 0003c260:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003c270:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c280:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003c290:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003c2a0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003c2b0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003c2c0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003c2d0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c2e0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c2f0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c300:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c310:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c320:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c330:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c340:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c350:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c360:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c370:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c380:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c390:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c3a0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c3b0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003c3c0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c3d0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c3e0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c3f0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c400:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c410:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003c420:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003c430:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003c440:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003c450:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003c460:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003c470:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c480:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003c490:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c4a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c4b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c4c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c4d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c4e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c4f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c500:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c510:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c520:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003c | 0003c530:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003c | 0003c540:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003c | 0003c550:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003c | 0003c560:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003c | 0003c570:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003c | 0003c580:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | ||
| 0003c | 0003c590:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003c | 0003c5a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003c | 0003c5b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003c | 0003c5c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003c | 0003c5d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003c | 0003c5e0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0003c | 0003c5f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003c | 0003c600:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c | 0003c610:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| Max diff block lines reached; 26142576/26180140 bytes (99.86%) of diff not shown. | |||
| Offset 15335, 282 lines modified | Offset 15335, 282 lines modified | ||
| 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bed0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bee0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bef0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bf00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bf10:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003bf20:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003bf30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bf40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bf50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bf60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bf70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bf80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bf90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bed0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003bee0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003bef0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bf00:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bf10:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bf20:·6964·3d22·6964·6d38·3031·3222·3e3c·7072··id="idm8012"><pr | |||
| 0003bf30:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003bf40:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003bf50:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003bf60:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003bf70:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bf80:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bf90:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bfa0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bfb0:·6574·3d22·2369·646d·3830·3133·2220·7461··et="#idm8013"·ta | |||
| 0003bfc0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bfd0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bfe0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bff0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c000:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c010:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c020:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003c030:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c040:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c050:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c060:·643d·2269·646d·3830·3133·223e·3c74·6162··d="idm8013"><tab | |||
| 0003c070:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c080:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c090:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c0a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c0b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003 | 0003bfa0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c0e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c0f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c100:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c110:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003 | 0003bfb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c130:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c140:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c150:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c160:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003c170:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c180:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003c190:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c1a0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c1b0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003 | 0003bfc0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bfd0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bfe0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bff0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c000:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c010:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003c020:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003c030:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003c040:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003c050:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003c060:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c070:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c080:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c090:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c0a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c0b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c0c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c0d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c0e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c0f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c100:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c110:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c120:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c130:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c140:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c150:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003c160:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c170:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c180:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c190:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c1a0:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c1b0:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c1c0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c1d0:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003c1e0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c1f0:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c200:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c210:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c220:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c230:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c240:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c250:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c260:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c270:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c280:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c290:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c2a0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c2b0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c2c0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c | 0003c2d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003c | 0003c2e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003c | 0003c2f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003c | 0003c300:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003c | 0003c310:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c | 0003c320:·3031·3322·2074·6162·696e·6465·783d·2230··013"·tabindex="0 | ||
| 0003c | 0003c330:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c | 0003c340:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c | 0003c350:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c | 0003c360:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c | 0003c370:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| Max diff block lines reached; 11514207/11551771 bytes (99.67%) of diff not shown. | |||
| Offset 133, 60 lines modified | Offset 133, 14 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 161 | if·rpm·--quiet·-q·kernel;·then | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 163 | ····yum·install·-y·"aide" | ||
| 164 | fi | ||
| 165 | else | ||
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 167 | fi | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | dnf·install·aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | -·name:·Gather·the·package·facts | 145 | -·name:·Gather·the·package·facts |
| 186 | ··package_facts: | 146 | ··package_facts: |
| Offset 224, 14 lines modified | Offset 178, 60 lines modified | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 229 | package·install·aide | 183 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····yum·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 231 | Run·the·following·command·to·generate·a·new·database: | 225 | Run·the·following·command·to·generate·a·new·database: |
| 232 | $·sudo·/usr/sbin/aide·--init | 226 | $·sudo·/usr/sbin/aide·--init |
| 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 234 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 228 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 235 | To·initiate·a·manual·check,·run·the·following·command: | 229 | To·initiate·a·manual·check,·run·the·following·command: |
| 236 | $·sudo·/usr/sbin/aide·--check | 230 | $·sudo·/usr/sbin/aide·--check |
| Offset 250, 28 lines modified | Offset 250, 14 lines modified | ||
| 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 254 | ············_\x8c_\x8i_\x8s············5.3.1 | 254 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1368918/1373949 bytes (99.63%) of diff not shown. | |||
| Offset 15326, 283 lines modified | Offset 15326, 283 lines modified | ||
| 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003be40:·5265·6d65·6469·6174·696f·6e20·4 | 0003be40:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003be50:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003be60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003be70:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003be80:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be90:·6964·6d38·3031·3222·3e3c·7461·626c·6520··idm8012"><table· | |||
| 0003bea0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003beb0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bec0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bed0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bee0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bef0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bf00:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003be50:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003be60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003be70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be90:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003bea0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003beb0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003bec0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003bed0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003bee0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bef0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bf00:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bf10:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bf20:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003bf30:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0003bf40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bf70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bf80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bf90:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bfa0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bfb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bfc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bfd0:·7073·6522·2069·643d·2269·646d·3830·3133··pse"·id="idm8013 | |||
| 0003bfe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003 | 0003bf10:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003 | 0003bf20:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003c050:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003 | 0003bf30:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003bf40:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003 | 0003bf50:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003 | 0003bf60:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003c090:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c0a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c0b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c0c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c0d0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003c0e0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003c0f0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c100:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c110:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003c120:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003 | 0003bf70:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003bf80:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bf90:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003bfa0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003bfb0:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003bfc0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003bfd0:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003bfe0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bff0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003c000:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003c010:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c020:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c030:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c040:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c050:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c060:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c070:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c080:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c090:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c0a0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c0b0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c0c0:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c0d0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c0e0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c0f0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c100:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c110:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c120:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c130:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c140:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c150:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c160:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c170:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c180:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c190:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c1a0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c1b0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c1c0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c1d0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c1e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c1f0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c200:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c210:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c220:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c230:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c | 0003c240:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003c | 0003c250:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003c | 0003c260:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c | 0003c270:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c | 0003c280:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c | 0003c290:·2223·6964·6d38·3031·3322·2074·6162·696e··"#idm8013"·tabin | ||
| 0003c | 0003c2a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c | 0003c2b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c | 0003c2c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c | 0003c2d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c | 0003c2e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c1f0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003c200:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c210:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c220:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| Max diff block lines reached; 11209530/11247232 bytes (99.66%) of diff not shown. | |||
| Offset 132, 60 lines modified | Offset 132, 14 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | include·install_aide | ||
| 149 | class·install_aide·{ | ||
| 150 | ··package·{·'aide': | ||
| 151 | ····ensure·=>·'installed', | ||
| 152 | ··} | ||
| 153 | } | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 160 | if·rpm·--quiet·-q·kernel;·then | ||
| 161 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 162 | ····yum·install·-y·"aide" | ||
| 163 | fi | ||
| 164 | else | ||
| 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 166 | fi | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·--add=aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 185 | ··package_facts: | 145 | ··package_facts: |
| Offset 223, 14 lines modified | Offset 177, 60 lines modified | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 228 | package·install·aide | 182 | package·install·aide |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | [[packages]] | ||
| 185 | name·=·"aide" | ||
| 186 | version·=·"*" | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 193 | if·rpm·--quiet·-q·kernel;·then | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 195 | ····yum·install·-y·"aide" | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | dnf·install·aide | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | include·install_aide | ||
| 212 | class·install_aide·{ | ||
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 222 | package·--add=aide | ||
| 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 223 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 230 | Run·the·following·command·to·generate·a·new·database: | 224 | Run·the·following·command·to·generate·a·new·database: |
| 231 | $·sudo·/usr/sbin/aide·--init | 225 | $·sudo·/usr/sbin/aide·--init |
| 232 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 226 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 233 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 227 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 234 | To·initiate·a·manual·check,·run·the·following·command: | 228 | To·initiate·a·manual·check,·run·the·following·command: |
| 235 | $·sudo·/usr/sbin/aide·--check | 229 | $·sudo·/usr/sbin/aide·--check |
| Offset 249, 28 lines modified | Offset 249, 14 lines modified | ||
| 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 253 | ············_\x8c_\x8i_\x8s············5.3.1 | 253 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1329538/1334569 bytes (99.62%) of diff not shown. | |||
| Offset 15365, 282 lines modified | Offset 15365, 282 lines modified | ||
| 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | ||
| 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c0b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003c0c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c0d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c0e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c0f0:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003c100:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c110:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c120:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c130:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c140:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c150:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c160:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c170:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c0b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003c0c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003c0d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c0e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c0f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c100:·643d·2269·646d·3830·3132·223e·3c70·7265··d="idm8012"><pre | |||
| 0003c110:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003c120:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003c130:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003c140:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c150:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003c160:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003c170:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003c180:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003c190:·743d·2223·6964·6d38·3031·3322·2074·6162··t="#idm8013"·tab | |||
| 0003c1a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003c1b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003c1c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003c1d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003c1e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003c1f0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003c200:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003c210:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c220:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c230:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c240:·3d22·6964·6d38·3031·3322·3e3c·7461·626c··="idm8013"><tabl | |||
| 0003c250:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c260:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c270:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c280:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c290:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c | 0003c180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003c | 0003c190:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c | 0003c1a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c | 0003c1b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c | 0003c1c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003c | 0003c1d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003c300:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c310:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c320:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c330:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c340:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003c350:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003c360:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003c370:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003c380:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c390:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c | 0003c1e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003c1f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003c200:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003c210:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003c220:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003c230:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003c240:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c250:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003c260:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003c270:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003c280:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003c290:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003c2a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003c2b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003c2c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c2d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c2e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c2f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c300:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c310:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c320:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c330:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003c340:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c350:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c360:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c370:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c380:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003c390:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003c3a0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003c3b0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c3c0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c3d0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c3e0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c3f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c400:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c410:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c420:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c430:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c440:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c450:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c460:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c470:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c480:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c490:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003c4a0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003c | 0003c4b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003c | 0003c4c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003c | 0003c4d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003c | 0003c4e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003c | 0003c4f0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003c | 0003c500:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | ||
| 0003c | 0003c510:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c | 0003c520:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c | 0003c530:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c | 0003c540:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c | 0003c550:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c | 0003c560:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | ||
| 0003c | 0003c570:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c | 0003c580:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c | 0003c590:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| Max diff block lines reached; 25934294/25971858 bytes (99.86%) of diff not shown. | |||
| Offset 15357, 282 lines modified | Offset 15357, 282 lines modified | ||
| 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | ||
| 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c030:·6961·7469·6f6e·204 | 0003c030:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003c040:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c050:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c060:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c070:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c080:·3132·223e·3c74·6162·6c65·2063·6c61·7373··12"><table·class | |||
| 0003c090:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c0a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c0b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c0c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c0d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c0e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c040:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c050:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c060:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c070:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c080:·2069·643d·2269·646d·3830·3132·223e·3c70···id="idm8012"><p | |||
| 0003c090:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003c0a0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003c0b0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003c0c0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003c0d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c0e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c0f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c100:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c110:·6765·743d·2223·6964·6d38·3031·3322·2074··get="#idm8013"·t | |||
| 0003c120:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c130:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c140:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c150:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c160:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c170:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c180:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003c190:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c1a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c1b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c1c0:·6964·3d22·6964·6d38·3031·3322·3e3c·7461··id="idm8013"><ta | |||
| 0003c1d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c1e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c1f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c200:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c210:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c | 0003c100:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003c | 0003c110:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c240:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c | 0003c120:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003c130:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c140:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c | 0003c150:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003c280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c290:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c2a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c2b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c2c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003c2d0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c2e0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003c2f0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c300:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c310:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003c | 0003c160:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003c170:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c180:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003c190:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003c1a0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003c1b0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003c1c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c1d0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c1e0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c1f0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c200:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c210:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c220:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c230:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c240:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c250:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c260:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c270:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c280:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c290:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c2a0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c2b0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003c2c0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c2d0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c2e0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c2f0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c300:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003c310:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003c320:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003c330:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003c340:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c350:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c360:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c370:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c380:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c390:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c3a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c3b0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c3c0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c3d0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c3e0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c3f0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c400:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c410:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c420:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c | 0003c430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003c | 0003c440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003c | 0003c450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003c | 0003c460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003c | 0003c470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003c | 0003c480:·3830·3133·2220·7461·6269·6e64·6578·3d22··8013"·tabindex=" | ||
| 0003c | 0003c490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003c | 0003c4a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003c | 0003c4b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003c | 0003c4c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003c | 0003c4d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003c | 0003c4e0:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0003c | 0003c4f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003c | 0003c500:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| Max diff block lines reached; 10010405/10047969 bytes (99.63%) of diff not shown. | |||
| Offset 138, 60 lines modified | Offset 138, 14 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····yum·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | dnf·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | -·name:·Gather·the·package·facts | 150 | -·name:·Gather·the·package·facts |
| 191 | ··package_facts: | 151 | ··package_facts: |
| Offset 229, 14 lines modified | Offset 183, 60 lines modified | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 234 | package·install·aide | 188 | package·install·aide |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·rpm·--quiet·-q·kernel;·then | ||
| 200 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 201 | ····yum·install·-y·"aide" | ||
| 202 | fi | ||
| 203 | else | ||
| 204 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 205 | fi | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | dnf·install·aide | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 217 | include·install_aide | ||
| 218 | class·install_aide·{ | ||
| 219 | ··package·{·'aide': | ||
| 220 | ····ensure·=>·'installed', | ||
| 221 | ··} | ||
| 222 | } | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 228 | package·--add=aide | ||
| 235 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 229 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 236 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 230 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 237 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 231 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 238 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 232 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 239 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 233 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 299, 107 lines modified | Offset 299, 87 lines modified | ||
| 299 | $·sudo·yum·install·crypto-policies | 299 | $·sudo·yum·install·crypto-policies |
| 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 301 | Severity: ··medium | 301 | Severity: ··medium |
| 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1343942/1349642 bytes (99.58%) of diff not shown. | |||
| Offset 15402, 408 lines modified | Offset 15402, 408 lines modified | ||
| 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | ||
| 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c300:·656d·6564·6961·7469·6f6e·20 | 0003c300:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c310:·2073·6 | 0003c310:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003c320:·6272 | 0003c320:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c330:· | 0003c330:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c340:·6 | 0003c340:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003c350:· | 0003c350:·646d·3736·3733·223e·3c74·6162·6c65·2063··dm7673"><table·c | ||
| 0003c360:· | 0003c360:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003c370:· | 0003c370:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003c380:·2 | 0003c380:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003c390:·6 | 0003c390:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c3a0:· | 0003c3a0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c3b0:· | 0003c3b0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c3c0:· | 0003c3c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c3d0:· | 0003c3d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c3e0:· | 0003c3e0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c3f0:· | 0003c3f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c400:· | 0003c400:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c410:· | 0003c410:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c420:·74 | 0003c420:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c430:· | 0003c430:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c440:· | 0003c440:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c450:·666 | 0003c450:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003c460:·7 | 0003c460:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003c470:· | 0003c470:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003c480:· | 0003c480:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003c490:·6 | 0003c490:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003c4a0:· | 0003c4a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003c4b0:· | 0003c4b0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c4c0:· | 0003c4c0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003c4d0:· | 0003c4d0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003c4e0:· | 0003c4e0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003c4f0:· | 0003c4f0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003c500:· | 0003c500:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003c510:·2 | 0003c510:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c520:· | 0003c520:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003c530:· | 0003c530:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003c540:· | 0003c540:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c550:· | 0003c550:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003c560:· | 0003c560:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003c570:· | 0003c570:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003c580:· | 0003c580:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003c590:· | 0003c590:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003c5a0:· | 0003c5a0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003c5b0:· | 0003c5b0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003c5c0:· | 0003c5c0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003c5d0:· | 0003c5d0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003c5e0:· | 0003c5e0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003c5f0:· | 0003c5f0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003c600:·202 | 0003c600:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003c610:· | 0003c610:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003c620:· | 0003c620:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003c630:·6 | 0003c630:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003c640:·6 | 0003c640:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003c650:· | 0003c650:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003c660:·6 | 0003c660:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003c670:·6 | 0003c670:·6e73·7461·6c6c·5f63·6d64·3a20·7975·6d20··nstall_cmd:·yum· | ||
| 0003c680:· | 0003c680:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | ||
| 0003c690:·6 | 0003c690:·6865·6e3a·0a20·202d·206e·6f74·2028·2022··hen:.··-·not·(·" | ||
| 0003c6a0:· | 0003c6a0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | ||
| 0003c6b0:· | 0003c6b0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003c6c0:· | 0003c6c0:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | ||
| 0003c6d0:·6522·206 | 0003c6d0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | ||
| 0003c6e0:· | 0003c6e0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003c6f0:· | 0003c6f0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | ||
| 0003c700:· | 0003c700:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003c710:·6 | 0003c710:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | ||
| 0003c720:· | 0003c720:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003c730:·7 | 0003c730:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 0003c740:· | 0003c740:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003c750:· | 0003c750:·2029·0a20·202d·2061·6e73·6962·6c65·5f64···).··-·ansible_d | ||
| 0003c760:· | 0003c760:·6973·7472·6962·7574·696f·6e20·696e·205b··istribution·in·[ | ||
| 0003c770:· | 0003c770:·2022·4665·646f·7261·222c·2022·5265·6448···"Fedora",·"RedH | ||
| 0003c780:·6 | 0003c780:·6174·222c·2022·4365·6e74·4f53·222c·2022··at",·"CentOS",·" | ||
| 0003c790:· | 0003c790:·4f72·6163·6c65·4c69·6e75·7822·205d·0a20··OracleLinux"·].· | ||
| 0003c7a0:· | 0003c7a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003c7b0:· | 0003c7b0:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003c7c0:· | 0003c7c0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003c7d0:· | 0003c7d0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003c7e0:· | 0003c7e0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003c7f0:· | 0003c7f0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003c800:· | 0003c800:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003c810:· | 0003c810:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003c820:·3 | 0003c820:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003c830:· | 0003c830:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c840:· | 0003c840:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003c850:· | 0003c850:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003c860:· | 0003c860:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c870:· | 0003c870:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003c880:· | 0003c880:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003c890:· | 0003c890:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003c8a0:· | 0003c8a0:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003c8b0:· | 0003c8b0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003c8c0:·6 | 0003c8c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003c8d0:·6 | 0003c8d0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003c8e0:· | 0003c8e0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003c8f0:·2 | 0003c8f0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003c900:· | 0003c900:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003c910:· | 0003c910:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| 0003c920:· | 0003c920:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003c930:· | 0003c930:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003c940:· | 0003c940:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003c950:· | 0003c950:·2028·7a79·7070·6572·2927·0a20·2073·6574···(zypper)'.··set | ||
| 0003c960:· | 0003c960:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003c970:· | 0003c970:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003c980:· | 0003c980:·7461·6c6c·5f63·6d64·3a20·7a79·7070·6572··tall_cmd:·zypper | ||
| 0003c990:· | 0003c990:·2069·6e20·2d66·202d·790a·2020·7768·656e···in·-f·-y.··when | ||
| 0003c9a0:· | 0003c9a0:·3a0a·2020·2d20·6e6f·7420·2820·226b·6572··:.··-·not·(·"ker | ||
| 0003c9b0:· | 0003c9b0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | ||
| 0003c9c0:· | 0003c9c0:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003c9d0:· | 0003c9d0:·6e64·2022·7270·6d2d·6f73·7472·6565·2220··nd·"rpm-ostree"· | ||
| 0003c9e0:·6 | 0003c9e0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003c9f0:·2 | 0003c9f0:·2e70·6163·6b61·6765·730a·2020·2020·616e··.packages.····an | ||
| 0003ca00:· | 0003ca00:·6420·2262·6f6f·7463·2220·696e·2061·6e73··d·"bootc"·in·ans | ||
| 0003ca10:· | 0003ca10:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003ca20:·6 | 0003ca20:·6765·7320·616e·6420·6e6f·7420·226f·7065··ges·and·not·"ope | ||
| 0003ca30:·6 | 0003ca30:·6e73·6869·6674·2d6b·7562·656c·6574·2220··nshift-kubelet"· | ||
| 0003ca40:· | 0003ca40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003ca50:·6 | 0003ca50:·2e70·6163·6b61·6765·730a·2020·2020·290a··.packages.····). | ||
| 0003ca60:·2 | 0003ca60:·2020·2d20·616e·7369·626c·655f·6469·7374····-·ansible_dist | ||
| Max diff block lines reached; 6736148/6791100 bytes (99.19%) of diff not shown. | |||
| Offset 132, 33 lines modified | Offset 132, 14 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 146 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 147 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 157 | -·name:·Gather·the·package·facts | 144 | -·name:·Gather·the·package·facts |
| 158 | ··package_facts: | 145 | ··package_facts: |
| Offset 325, 14 lines modified | Offset 306, 33 lines modified | ||
| 325 | ··-·PCI-DSSv4-11.5.2 | 306 | ··-·PCI-DSSv4-11.5.2 |
| 326 | ··-·high_complexity | 307 | ··-·high_complexity |
| 327 | ··-·high_severity | 308 | ··-·high_severity |
| 328 | ··-·medium_disruption | 309 | ··-·medium_disruption |
| 329 | ··-·no_reboot_needed | 310 | ··-·no_reboot_needed |
| 330 | ··-·restrict_strategy | 311 | ··-·restrict_strategy |
| 331 | ··-·rpm_verify_hashes | 312 | ··-·rpm_verify_hashes |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 316 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 320 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 321 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 322 | fi | ||
| 323 | else | ||
| 324 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 325 | fi | ||
| 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 333 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 327 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 334 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 328 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 335 | run·the·following·command·to·determine·which·package·owns·it: | 329 | run·the·following·command·to·determine·which·package·owns·it: |
| 336 | $·rpm·-qf·FILENAME | 330 | $·rpm·-qf·FILENAME |
| 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 338 | $·sudo·rpm·--restore·PACKAGENAME | 332 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 351, 46 lines modified | Offset 351, 14 lines modified | ||
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 365 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 366 | declare·-A·SETPERMS_RPM_DICT | ||
| 367 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 368 | #·is·expected·by·the·RPM·database | ||
| 369 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 370 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 371 | do | ||
| 372 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 373 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 374 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 390 | -·name:·Gather·the·package·facts | 363 | -·name:·Gather·the·package·facts |
| 391 | ··package_facts: | 364 | ··package_facts: |
| Offset 498, 14 lines modified | Offset 466, 46 lines modified | ||
| 498 | ··-·PCI-DSSv4-11.5.2 | 466 | ··-·PCI-DSSv4-11.5.2 |
| 499 | ··-·high_complexity | 467 | ··-·high_complexity |
| 500 | ··-·high_severity | 468 | ··-·high_severity |
| 501 | ··-·medium_disruption | 469 | ··-·medium_disruption |
| 502 | ··-·no_reboot_needed | 470 | ··-·no_reboot_needed |
| 503 | ··-·restrict_strategy | 471 | ··-·restrict_strategy |
| 504 | ··-·rpm_verify_ownership | 472 | ··-·rpm_verify_ownership |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 765828/773539 bytes (99.00%) of diff not shown. | |||
| Offset 15428, 408 lines modified | Offset 15428, 408 lines modified | ||
| 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | ||
| 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003c4b0:·6c6 | 0003c4b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c4c0:·3e3c | 0003c4c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c4d0:·2270 | 0003c4d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c4e0:·6 | 0003c4e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c4f0:·6d37 | 0003c4f0:·2269·646d·3736·3733·223e·3c74·6162·6c65··"idm7673"><table | ||
| 0003c500:· | 0003c500:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003c510:·6 | 0003c510:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003c520:·6 | 0003c520:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003c530:· | 0003c530:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003c540:· | 0003c540:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003c550:· | 0003c550:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003c560:· | 0003c560:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003c570:· | 0003c570:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003c580:· | 0003c580:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003c590:· | 0003c590:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003c5a0:· | 0003c5a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003c5b0:· | 0003c5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c5c0:· | 0003c5c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c5d0:· | 0003c5d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003c5e0:· | 0003c5e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c5f0:·6 | 0003c5f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003c600:· | 0003c600:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003c610:· | 0003c610:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003c620:·6 | 0003c620:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003c630:· | 0003c630:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003c640:·6 | 0003c640:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003c650:· | 0003c650:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c660:· | 0003c660:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c670:· | 0003c670:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c680:· | 0003c680:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c690:·2 | 0003c690:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c6a0:· | 0003c6a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c6b0:· | 0003c6b0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c6c0:·2 | 0003c6c0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c6d0:· | 0003c6d0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c6e0:· | 0003c6e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c6f0:· | 0003c6f0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c700:· | 0003c700:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c710:· | 0003c710:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c720:·2 | 0003c720:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c730:· | 0003c730:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c740:·6 | 0003c740:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c750:· | 0003c750:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c760:· | 0003c760:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c770:· | 0003c770:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003c780:·6 | 0003c780:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003c790:·7 | 0003c790:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003c7a0:· | 0003c7a0:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003c7b0:· | 0003c7b0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003c7c0:· | 0003c7c0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003c7d0:·6 | 0003c7d0:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003c7e0:· | 0003c7e0:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003c7f0:· | 0003c7f0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003c800:·6 | 0003c800:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003c810:· | 0003c810:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7975··einstall_cmd:·yu | ||
| 0003c820:·6 | 0003c820:·6d20·7265·696e·7374·616c·6c20·2d79·0a20··m·reinstall·-y.· | ||
| 0003c830:· | 0003c830:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003c840:· | 0003c840:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003c850:· | 0003c850:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c860:· | 0003c860:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003c870:·7 | 0003c870:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003c880:· | 0003c880:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003c890:· | 0003c890:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003c8a0:· | 0003c8a0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c8b0:· | 0003c8b0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003c8c0:· | 0003c8c0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003c8d0:· | 0003c8d0:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003c8e0:· | 0003c8e0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003c8f0:· | 0003c8f0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003c900:· | 0003c900:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003c910:· | 0003c910:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003c920:· | 0003c920:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003c930:· | 0003c930:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003c940:· | 0003c940:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c950:· | 0003c950:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c960:· | 0003c960:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c970:· | 0003c970:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c980:·3 | 0003c980:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c990:· | 0003c990:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c9a0:· | 0003c9a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c9b0:· | 0003c9b0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c9c0:· | 0003c9c0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c9d0:· | 0003c9d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c9e0:· | 0003c9e0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c9f0:·3 | 0003c9f0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003ca00:· | 0003ca00:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003ca10:· | 0003ca10:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003ca20:· | 0003ca20:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003ca30:· | 0003ca30:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003ca40:·20 | 0003ca40:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003ca50:·6 | 0003ca50:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003ca60:·6 | 0003ca60:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003ca70:· | 0003ca70:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003ca80:·6 | 0003ca80:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003ca90:· | 0003ca90:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003caa0:· | 0003caa0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003cab0:· | 0003cab0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003cac0:· | 0003cac0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003cad0:· | 0003cad0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003cae0:·20 | 0003cae0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003caf0:· | 0003caf0:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003cb00:· | 0003cb00:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003cb10:· | 0003cb10:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003cb20:· | 0003cb20:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003cb30:· | 0003cb30:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003cb40:· | 0003cb40:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003cb50:· | 0003cb50:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003cb60:· | 0003cb60:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003cb70:· | 0003cb70:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003cb80:· | 0003cb80:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003cb90:· | 0003cb90:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003cba0:· | 0003cba0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003cbb0:· | 0003cbb0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003cbc0:·6 | 0003cbc0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003cbd0:· | 0003cbd0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003cbe0:· | 0003cbe0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003cbf0:·7 | 0003cbf0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003cc00:· | 0003cc00:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 17390009/17444961 bytes (99.68%) of diff not shown. | |||
| Offset 138, 33 lines modified | Offset 138, 14 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 148 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 149 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 150 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 151 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 163 | -·name:·Gather·the·package·facts | 150 | -·name:·Gather·the·package·facts |
| 164 | ··package_facts: | 151 | ··package_facts: |
| Offset 331, 14 lines modified | Offset 312, 33 lines modified | ||
| 331 | ··-·PCI-DSSv4-11.5.2 | 312 | ··-·PCI-DSSv4-11.5.2 |
| 332 | ··-·high_complexity | 313 | ··-·high_complexity |
| 333 | ··-·high_severity | 314 | ··-·high_severity |
| 334 | ··-·medium_disruption | 315 | ··-·medium_disruption |
| 335 | ··-·no_reboot_needed | 316 | ··-·no_reboot_needed |
| 336 | ··-·restrict_strategy | 317 | ··-·restrict_strategy |
| 337 | ··-·rpm_verify_hashes | 318 | ··-·rpm_verify_hashes |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 322 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 326 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 327 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 333 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 340 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 334 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 341 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 335 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 342 | $·rpm·-qf·FILENAME | 336 | $·rpm·-qf·FILENAME |
| 343 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 359, 50 lines modified | Offset 359, 14 lines modified | ||
| 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 372 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 373 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 374 | declare·-A·SETPERMS_RPM_DICT | ||
| 375 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 376 | #·is·expected·by·the·RPM·database | ||
| 377 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 378 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 379 | do | ||
| 380 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 381 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 382 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 383 | ········do | ||
| 384 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 385 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 386 | ········done | ||
| 387 | done | ||
| 388 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 389 | #·correct·values | ||
| 390 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 391 | do | ||
| 392 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 393 | done | ||
| 394 | else | ||
| 395 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 396 | fi | ||
| 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 400 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 401 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 402 | -·name:·Gather·the·package·facts | 371 | -·name:·Gather·the·package·facts |
| 403 | ··package_facts: | 372 | ··package_facts: |
| Offset 514, 14 lines modified | Offset 478, 50 lines modified | ||
| 514 | ··-·PCI-DSSv4-11.5.2 | 478 | ··-·PCI-DSSv4-11.5.2 |
| 515 | ··-·high_complexity | 479 | ··-·high_complexity |
| 516 | ··-·high_severity | 480 | ··-·high_severity |
| 517 | ··-·medium_disruption | 481 | ··-·medium_disruption |
| 518 | ··-·no_reboot_needed | 482 | ··-·no_reboot_needed |
| 519 | ··-·restrict_strategy | 483 | ··-·restrict_strategy |
| 520 | ··-·rpm_verify_permissions | 484 | ··-·rpm_verify_permissions |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1390373/1398457 bytes (99.42%) of diff not shown. | |||
| Offset 15437, 408 lines modified | Offset 15437, 408 lines modified | ||
| 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | ||
| 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c530:· | 0003c530:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003c540:·3c2f | 0003c540:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003c550:· | 0003c550:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003c560:·7365 | 0003c560:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c570:·2269 | 0003c570:·6964·3d22·6964·6d37·3637·3322·3e3c·7461··id="idm7673"><ta | ||
| 0003c580:·6 | 0003c580:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003c590:· | 0003c590:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003c5a0:· | 0003c5a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003c5b0:· | 0003c5b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003c5c0:· | 0003c5c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003c5d0:· | 0003c5d0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003c5e0:· | 0003c5e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c5f0:· | 0003c5f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c600:· | 0003c600:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003c610:·3 | 0003c610:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003c620:· | 0003c620:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c630:·3 | 0003c630:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003c640:· | 0003c640:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003c650:·6 | 0003c650:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003c660:· | 0003c660:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003c670:· | 0003c670:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003c680:·6 | 0003c680:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003c690:·6 | 0003c690:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003c6a0:·6 | 0003c6a0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003c6b0:· | 0003c6b0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003c6c0:· | 0003c6c0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003c6d0:· | 0003c6d0:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003c6e0:· | 0003c6e0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003c6f0:· | 0003c6f0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003c700:· | 0003c700:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003c710:· | 0003c710:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003c720:· | 0003c720:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003c730:· | 0003c730:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003c740:· | 0003c740:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003c750:· | 0003c750:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c760:· | 0003c760:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003c770:· | 0003c770:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003c780:· | 0003c780:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c790:·2 | 0003c790:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003c7a0:· | 0003c7a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003c7b0:· | 0003c7b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003c7c0:·2 | 0003c7c0:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003c7d0:· | 0003c7d0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003c7e0:·6 | 0003c7e0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003c7f0:·6 | 0003c7f0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003c800:· | 0003c800:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003c810:· | 0003c810:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003c820:· | 0003c820:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003c830:· | 0003c830:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| 0003c840:·6 | 0003c840:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003c850:·6 | 0003c850:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003c860:· | 0003c860:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003c870:· | 0003c870:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003c880:· | 0003c880:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003c890:·7 | 0003c890:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003c8a0:· | 0003c8a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003c8b0:· | 0003c8b0:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003c8c0:· | 0003c8c0:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003c8d0:·6 | 0003c8d0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003c8e0:· | 0003c8e0:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003c8f0:·6 | 0003c8f0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003c900:·6 | 0003c900:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003c910:· | 0003c910:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003c920:· | 0003c920:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c930:·7 | 0003c930:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003c940:· | 0003c940:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003c950:·7 | 0003c950:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003c960:· | 0003c960:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003c970:·20 | 0003c970:·730a·2020·2020·290a·2020·2d20·616e·7369··s.····).··-·ansi | ||
| 0003c980:· | 0003c980:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | ||
| 0003c990:·206 | 0003c990:·2069·6e20·5b20·2246·6564·6f72·6122·2c20···in·[·"Fedora",· | ||
| 0003c9a0:· | 0003c9a0:·2252·6564·4861·7422·2c20·2243·656e·744f··"RedHat",·"CentO | ||
| 0003c9b0:· | 0003c9b0:·5322·2c20·224f·7261·636c·654c·696e·7578··S",·"OracleLinux | ||
| 0003c9c0:· | 0003c9c0:·2220·5d0a·2020·7461·6773·3a0a·2020·2d20··"·].··tags:.··-· | ||
| 0003c9d0:· | 0003c9d0:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003c9e0:· | 0003c9e0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c9f0:· | 0003c9f0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003ca00:·3 | 0003ca00:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003ca10:· | 0003ca10:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003ca20:· | 0003ca20:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003ca30:· | 0003ca30:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003ca40:· | 0003ca40:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003ca50:· | 0003ca50:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003ca60:· | 0003ca60:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003ca70:· | 0003ca70:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003ca80:· | 0003ca80:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003ca90:· | 0003ca90:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003caa0:·2 | 0003caa0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003cab0:· | 0003cab0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003cac0:· | 0003cac0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003cad0:·6 | 0003cad0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003cae0:· | 0003cae0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003caf0:· | 0003caf0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003cb00:·202 | 0003cb00:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003cb10:· | 0003cb10:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003cb20:·5 | 0003cb20:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003cb30:· | 0003cb30:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003cb40:· | 0003cb40:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003cb50:· | 0003cb50:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003cb60:· | 0003cb60:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003cb70:· | 0003cb70:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003cb80:·2 | 0003cb80:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003cb90:· | 0003cb90:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003cba0:· | 0003cba0:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003cbb0:· | 0003cbb0:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003cbc0:·20 | 0003cbc0:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003cbd0:· | 0003cbd0:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003cbe0:· | 0003cbe0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003cbf0:· | 0003cbf0:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003cc00:·2 | 0003cc00:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003cc10:· | 0003cc10:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003cc20:· | 0003cc20:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003cc30:·6 | 0003cc30:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003cc40:· | 0003cc40:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003cc50:·202 | 0003cc50:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003cc60:·6 | 0003cc60:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003cc70:· | 0003cc70:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003cc80:· | 0003cc80:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003cc90:·5 | 0003cc90:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | ||
| Max diff block lines reached; 10101149/10156101 bytes (99.46%) of diff not shown. | |||
| Offset 139, 33 lines modified | Offset 139, 14 lines modified | ||
| 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 149 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 150 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 151 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 152 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 153 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 154 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 164 | -·name:·Gather·the·package·facts | 151 | -·name:·Gather·the·package·facts |
| 165 | ··package_facts: | 152 | ··package_facts: |
| Offset 332, 14 lines modified | Offset 313, 33 lines modified | ||
| 332 | ··-·PCI-DSSv4-11.5.2 | 313 | ··-·PCI-DSSv4-11.5.2 |
| 333 | ··-·high_complexity | 314 | ··-·high_complexity |
| 334 | ··-·high_severity | 315 | ··-·high_severity |
| 335 | ··-·medium_disruption | 316 | ··-·medium_disruption |
| 336 | ··-·no_reboot_needed | 317 | ··-·no_reboot_needed |
| 337 | ··-·restrict_strategy | 318 | ··-·restrict_strategy |
| 338 | ··-·rpm_verify_hashes | 319 | ··-·rpm_verify_hashes |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 322 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 323 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 324 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 325 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 326 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 335 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 342 | run·the·following·command·to·determine·which·package·owns·it: | 336 | run·the·following·command·to·determine·which·package·owns·it: |
| 343 | $·rpm·-qf·FILENAME | 337 | $·rpm·-qf·FILENAME |
| 344 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 338 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 345 | $·sudo·rpm·--restore·PACKAGENAME | 339 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 358, 46 lines modified | Offset 358, 14 lines modified | ||
| 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 372 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 373 | declare·-A·SETPERMS_RPM_DICT | ||
| 374 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 375 | #·is·expected·by·the·RPM·database | ||
| 376 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 377 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 378 | do | ||
| 379 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 380 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 381 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 382 | done | ||
| 383 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 384 | #·correct·values | ||
| 385 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 386 | do | ||
| 387 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 388 | done | ||
| 389 | else | ||
| 390 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 391 | fi | ||
| 392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 397 | -·name:·Gather·the·package·facts | 370 | -·name:·Gather·the·package·facts |
| 398 | ··package_facts: | 371 | ··package_facts: |
| Offset 505, 14 lines modified | Offset 473, 46 lines modified | ||
| 505 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 506 | ··-·high_complexity | 474 | ··-·high_complexity |
| 507 | ··-·high_severity | 475 | ··-·high_severity |
| 508 | ··-·medium_disruption | 476 | ··-·medium_disruption |
| 509 | ··-·no_reboot_needed | 477 | ··-·no_reboot_needed |
| 510 | ··-·restrict_strategy | 478 | ··-·restrict_strategy |
| 511 | ··-·rpm_verify_ownership | 479 | ··-·rpm_verify_ownership |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1095014/1102725 bytes (99.30%) of diff not shown. | |||
| Offset 15330, 282 lines modified | Offset 15330, 282 lines modified | ||
| 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003be80:·656d·6564·6961·7469·6f6e·204 | 0003be80:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003be90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003be90:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003bea0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003beb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bec0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bed0:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003bee0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003bef0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003bf00:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003bf10:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003bf20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bf30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bf40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bf50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bf60:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003bf70:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003bf80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bf90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bfa0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bfb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bfc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bfd0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bfe0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bff0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c000:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c010:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c020:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c030:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c040:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c050:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c060:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c070:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c080:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c090:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c0a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c0b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c0c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c0d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c0e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c0f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c100:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c110:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003c120:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003c130:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003c140:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003c150:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003c160:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003c170:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003c180:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c190:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c1a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c1b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c1c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c1d0:·646d·3830·3134·2220·7461·6269·6e64·6578··dm8014"·tabindex | |||
| 0003c1e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c1f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c200:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c210:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c220:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c230:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003c240:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c250:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c260:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c270:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c280:·3134·223e·3c74·6162·6c65·2063·6c61·7373··14"><table·class | |||
| 0003c290:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c2a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c2b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c2c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c2d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c2e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c2f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c300:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c310:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c320:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c330:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c340:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c350:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c360:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c370:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003c380:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003c390:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003c3a0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003c3b0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003c3c0:·202d·7120·6b65·726e·656c·3b20·7468·656e···-q·kernel;·then | |||
| 0003c3d0:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003c3e0:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003c3f0:·6865·6e0a·2020·2020·7975·6d20·696e·7374··hen.····yum·inst | |||
| 0003c400:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003c410:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003c420:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003c430:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003c440:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003c450:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003c460:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c470:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c480:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c490:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c4a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c4b0:·3d22·2369·646d·3830·3135·2220·7461·6269··="#idm8015"·tabi | |||
| 0003c4c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c4d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c4e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c4f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c500:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c510:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003c520:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003c530:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c540:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c550:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c560:·643d·2269·646d·3830·3135·223e·3c74·6162··d="idm8015"><tab | |||
| 0003c570:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c580:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c590:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c5a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c5b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c5c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c5d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c5e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| Max diff block lines reached; 10012613/10050177 bytes (99.63%) of diff not shown. | |||
| Offset 130, 60 lines modified | Offset 130, 14 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·kernel;·then | ||
| 159 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 160 | ····yum·install·-y·"aide" | ||
| 161 | fi | ||
| 162 | else | ||
| 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 164 | fi | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | dnf·install·aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 183 | ··package_facts: | 143 | ··package_facts: |
| Offset 221, 14 lines modified | Offset 175, 60 lines modified | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 226 | package·install·aide | 180 | package·install·aide |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel;·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····yum·install·-y·"aide" | ||
| 194 | fi | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | dnf·install·aide | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | include·install_aide | ||
| 210 | class·install_aide·{ | ||
| 211 | ··package·{·'aide': | ||
| 212 | ····ensure·=>·'installed', | ||
| 213 | ··} | ||
| 214 | } | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 220 | package·--add=aide | ||
| 227 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 221 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 228 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 222 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 229 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 223 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 230 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 224 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 107 lines modified | Offset 291, 87 lines modified | ||
| 291 | $·sudo·yum·install·crypto-policies | 291 | $·sudo·yum·install·crypto-policies |
| 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 293 | Severity: ··medium | 293 | Severity: ··medium |
| 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1343959/1349659 bytes (99.58%) of diff not shown. | |||
| Offset 15429, 408 lines modified | Offset 15429, 408 lines modified | ||
| 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | ||
| 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003c4b0:·6d65·6469·6174·696f·6e20· | 0003c4b0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003c4c0:·736 | 0003c4c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003c4d0:·723e | 0003c4d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003c4e0:· | 0003c4e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003c4f0:·6c6 | 0003c4f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003c500:·3733·223e | 0003c500:·6d37·3637·3322·3e3c·7461·626c·6520·636c··m7673"><table·cl | ||
| 0003c510:· | 0003c510:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003c520:· | 0003c520:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003c530:·6 | 0003c530:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003c540:·6 | 0003c540:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003c550:· | 0003c550:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003c560:· | 0003c560:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003c570:· | 0003c570:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003c580:· | 0003c580:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003c590:· | 0003c590:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003c5a0:· | 0003c5a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003c5b0:·746 | 0003c5b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003c5c0:· | 0003c5c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003c5d0:· | 0003c5d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003c5e0:· | 0003c5e0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003c5f0:· | 0003c5f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003c600:·6 | 0003c600:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003c610:·6 | 0003c610:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003c620:· | 0003c620:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003c630:·66 | 0003c630:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003c640:·6 | 0003c640:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003c650:· | 0003c650:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003c660:· | 0003c660:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003c670:· | 0003c670:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003c680:·5 | 0003c680:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003c690:· | 0003c690:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c6a0:· | 0003c6a0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003c6b0:· | 0003c6b0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003c6c0:· | 0003c6c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c6d0:· | 0003c6d0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003c6e0:· | 0003c6e0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003c6f0:· | 0003c6f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c700:· | 0003c700:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003c710:· | 0003c710:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003c720:· | 0003c720:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003c730:·2 | 0003c730:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003c740:· | 0003c740:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003c750:· | 0003c750:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003c760:·6 | 0003c760:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003c770:· | 0003c770:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003c780:· | 0003c780:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003c790:·7 | 0003c790:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003c7a0:· | 0003c7a0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003c7b0:·2 | 0003c7b0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003c7c0:· | 0003c7c0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003c7d0:· | 0003c7d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003c7e0:· | 0003c7e0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003c7f0:·6c | 0003c7f0:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003c800:· | 0003c800:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c810:· | 0003c810:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c820:· | 0003c820:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003c830:· | 0003c830:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003c840:·6 | 0003c840:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003c850:· | 0003c850:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003c860:·6 | 0003c860:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c870:· | 0003c870:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003c880:·2220·6 | 0003c880:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c890:· | 0003c890:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c8a0:· | 0003c8a0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003c8b0:·6 | 0003c8b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c8c0:·6 | 0003c8c0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003c8d0:· | 0003c8d0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003c8e0:· | 0003c8e0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c8f0:· | 0003c8f0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c900:· | 0003c900:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| 0003c910:· | 0003c910:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003c920:· | 0003c920:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003c930:·2 | 0003c930:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003c940:· | 0003c940:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003c950:· | 0003c950:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003c960:· | 0003c960:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003c970:· | 0003c970:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003c980:· | 0003c980:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c990:· | 0003c990:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003c9a0:· | 0003c9a0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003c9b0:·2 | 0003c9b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c9c0:· | 0003c9c0:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003c9d0:· | 0003c9d0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003c9e0:· | 0003c9e0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c9f0:·2 | 0003c9f0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003ca00:· | 0003ca00:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003ca10:· | 0003ca10:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003ca20:·3 | 0003ca20:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003ca30:· | 0003ca30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003ca40:· | 0003ca40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003ca50:· | 0003ca50:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003ca60:· | 0003ca60:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003ca70:· | 0003ca70:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003ca80:· | 0003ca80:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003ca90:· | 0003ca90:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003caa0:· | 0003caa0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003cab0:· | 0003cab0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003cac0:· | 0003cac0:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003cad0:· | 0003cad0:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003cae0:· | 0003cae0:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003caf0:· | 0003caf0:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | ||
| 0003cb00:·2 | 0003cb00:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | ||
| 0003cb10:· | 0003cb10:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003cb20:· | 0003cb20:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003cb30:· | 0003cb30:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | ||
| 0003cb40:· | 0003cb40:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | ||
| 0003cb50:· | 0003cb50:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003cb60:· | 0003cb60:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003cb70:· | 0003cb70:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003cb80:· | 0003cb80:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003cb90:·6 | 0003cb90:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003cba0:· | 0003cba0:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003cbb0:·202 | 0003cbb0:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003cbc0:· | 0003cbc0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003cbd0:·6 | 0003cbd0:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003cbe0:·73 | 0003cbe0:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003cbf0:· | 0003cbf0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003cc00:·61 | 0003cc00:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003cc10:· | 0003cc10:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| Max diff block lines reached; 17698978/17753930 bytes (99.69%) of diff not shown. | |||
| Offset 15363, 282 lines modified | Offset 15363, 282 lines modified | ||
| 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | ||
| 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c090:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c0a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c0b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c0c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c0d0:·6522·2069·643d·2269·646d·3830·3132·223e··e"·id="idm8012"> | |||
| 0003c0e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c0f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c100:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c110:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c120:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c130:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c140:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c150:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c090:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c0a0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c0b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c0c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c0d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c0e0:·2269·646d·3830·3132·223e·3c70·7265·3e3c··"idm8012"><pre>< | |||
| 0003c0f0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c100:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c110:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c120:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c130:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c140:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c150:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c170:·2223·6964·6d38·3031·3322·2074·6162·696e··"#idm8013"·tabin | |||
| 0003c180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c1d0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c1e0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c1f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c200:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c210:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c220:·6964·6d38·3031·3322·3e3c·7461·626c·6520··idm8013"><table· | |||
| 0003c230:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c240:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c250:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c260:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c270:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c | 0003c160:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003c | 0003c170:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003c | 0003c180:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003c | 0003c190:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003c | 0003c1a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003c | 0003c1b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003c2e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c2f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c300:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c310:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c320:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003c330:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003c340:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003c350:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003c360:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003c370:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003c | 0003c1c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c1d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c1e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003c1f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003c200:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003c210:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003c220:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c230:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c240:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c250:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c260:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c270:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c280:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c290:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c2a0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c2b0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c2c0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c2d0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c2e0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c2f0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c300:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c310:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003c320:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c330:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003c340:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003c350:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c360:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003c370:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003c380:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003c390:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c3a0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c3b0:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c3c0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c3d0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c3e0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c3f0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c400:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c410:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c420:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c430:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c440:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c450:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c460:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c470:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c480:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c | 0003c490:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003c | 0003c4a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003c | 0003c4b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003c | 0003c4c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003c | 0003c4d0:·7461·7267·6574·3d22·2369·646d·3830·3133··target="#idm8013 | ||
| 0003c | 0003c4e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c | 0003c4f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c | 0003c500:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c | 0003c510:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c | 0003c520:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c | 0003c530:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c | 0003c540:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | ||
| 0003c | 0003c550:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c | 0003c560:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c | 0003c570:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| Max diff block lines reached; 28750920/28788484 bytes (99.87%) of diff not shown. | |||
| Offset 15382, 282 lines modified | Offset 15382, 282 lines modified | ||
| 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | ||
| 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c1c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003c1d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c1e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c1f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c200:·7365·2220·6964·3d22·6964·6d38·3031·3222··se"·id="idm8012" | |||
| 0003c1c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003c1d0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c1e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c1f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c200:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c210:·3d22·6964·6d38·3031·3222·3e3c·7072·653e··="idm8012"><pre> | |||
| 0003c220:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003c230:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003c240:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003c250:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c2 | 0003c210:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003c220:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c230:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c240:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c250:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c260:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c270:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c280:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c270:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c280:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c290:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c2a0:·3d22·2369·646d·3830·3133·2220·7461·6269··="#idm8013"·tabi | |||
| 0003c2b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c2c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c2d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c2e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c2f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c300:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003c310:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003c320:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c330:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c340:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c350:·2269·646d·3830·3133·223e·3c74·6162·6c65··"idm8013"><table | |||
| 0003c360:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c370:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c380:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c390:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c3a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c | 0003c290:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003c3c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c3d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c3e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c3f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c400:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c | 0003c2a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003c | 0003c2b0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c430:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c440:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c450:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003c460:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003c470:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003c480:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003c490:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003c4a0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003c | 0003c2c0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003c2d0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c2e0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c2f0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c300:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003c310:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003c320:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003c330:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003c340:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003c350:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003c360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003c370:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003c380:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003c390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003c3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003c3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003c3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003c3f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003c400:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003c410:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003c420:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003c430:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c440:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003c450:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c460:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c470:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c480:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c490:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003c4a0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003c4b0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003c4c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c4d0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c4e0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c4f0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c500:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c510:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c520:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c530:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c540:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c550:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c560:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c570:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c580:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c590:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c5a0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c5b0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003c | 0003c5c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003c | 0003c5d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003c | 0003c5e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003c | 0003c5f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003c | 0003c600:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | ||
| 0003c | 0003c610:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | ||
| 0003c | 0003c620:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c | 0003c630:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c | 0003c640:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c | 0003c650:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c | 0003c660:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c | 0003c670:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | ||
| 0003c | 0003c680:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| Max diff block lines reached; 28593243/28630807 bytes (99.87%) of diff not shown. | |||
| Offset 15178, 279 lines modified | Offset 15178, 279 lines modified | ||
| 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | ||
| 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b500:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b500:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b510:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b520:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b530:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b540:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b550:·3d22·6964·6d37·3333·3122·3e3c·7461·626c··="idm7331"><tabl | |||
| 0003b560:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b570:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b580:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b590:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b5a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b5b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b5c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b5d0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b510:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b520:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b530:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b540:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b550:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b560:·3333·3122·3e3c·7072·653e·3c63·6f64·653e··331"><pre><code> | |||
| 0003b570:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b580:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b590:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b5a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b5b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b5d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5f0:·3733·3332·2220·7461·6269·6e64·6578·3d22··7332"·tabindex=" | |||
| 0003b600:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b610:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b620:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b630:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b640:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b650:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b660:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b670:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b680:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b690:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b6a0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b6b0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6c0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b6d0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b6e0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b6f0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b5e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b710:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b720:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b730:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b740:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b750:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b760:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b770:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b780:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b790:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b7a0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b7b0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b7c0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b7d0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b7e0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b7f0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b800:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b810:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b820:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b830:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b840:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b850:·2223·6964·6d37·3333·3322·2074·6162·696e··"#idm7333"·tabin | |||
| 0003b860:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b870:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b880:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b890:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b8a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b8b0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b8c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b8d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b8e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b8f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b900:·6d37·3333·3322·3e3c·7461·626c·6520·636c··m7333"><table·cl | |||
| 0003b910:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b920:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b930:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b940:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b950:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b960:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b970:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b980:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b990:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b5f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b600:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b9c0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b9d0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b9e0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b9f0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003ba00:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003ba10:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003ba20:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003ba30:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003ba40:·6965·7420·2d71·206b·6572·6e65·6c3b·2074··iet·-q·kernel;·t | |||
| 0003ba50:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003ba60:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003ba70:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003ba80:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003ba90:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003baa0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003bab0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003bac0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003bad0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003bae0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003baf0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bb00:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb10:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb20:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bb30:·6765·743d·2223·6964·6d37·3333·3422·2074··get="#idm7334"·t | |||
| 0003bb40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bb50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bb60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bb70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bb80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bb90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bba0:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| Max diff block lines reached; 21224651/21261801 bytes (99.83%) of diff not shown. | |||
| Offset 15184, 278 lines modified | Offset 15184, 278 lines modified | ||
| 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b560:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b590:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5a0:·2069·643d·2269·646d·3733·3331·223e·3c74···id="idm7331"><t | |||
| 0003b5b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b5d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b5e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b5f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b600:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b610:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b620:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b560:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b570:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b580:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b590:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5b0:·646d·3733·3331·223e·3c70·7265·3e3c·636f··dm7331"><pre><co | |||
| 0003b5c0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b5d0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b5e0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b5f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b600:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b610:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b620:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b630:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b640:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003b650:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b660:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b670:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b680:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b690:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6a0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b6b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b6d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b6e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b6f0:·6d37·3333·3222·3e3c·7461·626c·6520·636c··m7332"><table·cl | |||
| 0003b700:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b710:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b720:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b730:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b740:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b630:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b760:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b770:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b780:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b790:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b7d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b7e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b7f0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b800:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b810:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b820:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b830:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b840:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b850:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b860:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b870:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b880:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b890:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b8a0:·6574·3d22·2369·646d·3733·3333·2220·7461··et="#idm7333"·ta | |||
| 0003b8b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b8c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b8d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b8e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b8f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b900:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b910:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b920:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b930:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b940:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b950:·2269·646d·3733·3333·223e·3c74·6162·6c65··"idm7333"><table | |||
| 0003b960:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b970:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b980:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b990:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b9b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b9d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b9e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b9f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba00:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba10:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ba20:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ba30:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba40:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ba50:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003ba60:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003ba70:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003ba80:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | |||
| 0003ba90:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003baa0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bab0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bac0:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003bad0:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003bae0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003baf0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003bb00:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bb10:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003bb20:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003bb30:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003bb40:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bb50:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bb60:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bb70:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bb80:·7461·7267·6574·3d22·2369·646d·3733·3334··target="#idm7334 | |||
| 0003bb90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bba0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bbb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bbc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bbd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bbe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bbf0:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003bc00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 21516437/21553449 bytes (99.83%) of diff not shown. | |||
| Offset 15174, 279 lines modified | Offset 15174, 279 lines modified | ||
| 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | ||
| 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4c0:·656d·6564·6961·7469·6f6e·204 | 0003b4c0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b4d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b4e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b4f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b500:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b510:·646d·3733·3331·223e·3c74·6162·6c65·2063··dm7331"><table·c | |||
| 0003b520:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b530:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b540:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b550:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b560:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b570:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b580:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b4d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b4e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b4f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b500:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b510:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | |||
| 0003b520:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b530:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b540:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b550:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b560:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b570:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b580:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b590:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5a0:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003b5b0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b5c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b5d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b5e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b5f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b600:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b610:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b620:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b630:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b640:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b650:·7365·2220·6964·3d22·6964·6d37·3333·3222··se"·id="idm7332" | |||
| 0003b660:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b670:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b680:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b690:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b6a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b590:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b5a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b6d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b6e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b700:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b710:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b720:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b730:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b740:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b750:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b760:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b770:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b780:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b790:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b7a0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b7b0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b7c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b7d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b7e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b7f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b800:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b810:·646d·3733·3333·2220·7461·6269·6e64·6578··dm7333"·tabindex | |||
| 0003b820:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b830:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b840:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b850:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b860:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b870:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b880:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b890:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b8a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b8b0:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b8c0:·3333·223e·3c74·6162·6c65·2063·6c61·7373··33"><table·class | |||
| 0003b8d0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b8e0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b8f0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b900:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b910:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b920:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b930:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b940:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b950:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b960:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b970:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b980:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b990:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b9a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b9b0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b9c0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b9d0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b9e0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b9f0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003ba00:·202d·7120·6b65·726e·656c·3b20·7468·656e···-q·kernel;·then | |||
| 0003ba10:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003ba20:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003ba30:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003ba40:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003ba50:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003ba60:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003ba70:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003ba80:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003ba90:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003baa0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bab0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bac0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bad0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003baf0:·3d22·2369·646d·3733·3334·2220·7461·6269··="#idm7334"·tabi | |||
| 0003bb00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bb10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bb20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bb30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bb40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bb50:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003bb60:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003bb70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| Max diff block lines reached; 9191642/9228792 bytes (99.60%) of diff not shown. | |||
| Offset 135, 60 lines modified | Offset 135, 14 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····dnf·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 188 | ··package_facts: | 148 | ··package_facts: |
| Offset 224, 14 lines modified | Offset 178, 60 lines modified | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 229 | package·install·aide | 183 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····dnf·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 231 | Run·the·following·command·to·generate·a·new·database: | 225 | Run·the·following·command·to·generate·a·new·database: |
| 232 | $·sudo·/usr/sbin/aide·--init | 226 | $·sudo·/usr/sbin/aide·--init |
| 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 234 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 228 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 235 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 229 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 236 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 230 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 256, 28 lines modified | Offset 256, 14 lines modified | ||
| 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1058762/1063619 bytes (99.54%) of diff not shown. | |||
| Offset 14855, 294 lines modified | Offset 14855, 294 lines modified | ||
| 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | ||
| 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003a0e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003a0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a120:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a130:·3035·3432·223e·3c70·7265·3e3c·636f·6465··0542"><pre><code | |||
| 0003a | 0003a0e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003a0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a120:·3d22·6964·6d31·3035·3432·223e·3c74·6162··="idm10542"><tab | |||
| 0003a130:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a140:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a150:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a160:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a170:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a180:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a190:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a1a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a1b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a1c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a1d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a1e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a1f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a200:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003a210:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a220:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003a230:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003a240:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003a250:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003a260:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003a270:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a280:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a290:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a2a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a2b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a2c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a2d0:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a2e0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a2f0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003a300:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a310:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a320:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a | 0003a330:·206e·616d·653a·2064·6e66·2d61·7574·6f6d···name:·dnf-autom | ||
| 0003a | 0003a340:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | ||
| 0003a350:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003a360:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | |||
| 0003a370:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003a380:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | |||
| 0003a390:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | |||
| 0003a3a0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a3b0:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | |||
| 0003a3c0:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | |||
| 0003a3d0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | |||
| 0003a3e0:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | |||
| 0003a3f0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | |||
| 0003a400:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a410:·6765·730a·2020·2020·290a·2020·7461·6773··ges.····).··tags | |||
| 0003a420:·3a0a·2020·2d20·656e·6162·6c65·5f73·7472··:.··-·enable_str | |||
| 0003a430:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a440:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a450:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a460:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a470:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a480:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003a490:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a4a0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003a4b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a4c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a4d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a4e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a4f0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a500:·3035·3433·2220·7461·6269·6e64·6578·3d22··0543"·tabindex=" | |||
| 0003a510:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a520:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a530:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a540:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a550:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a560:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003a570:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a580:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a590:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a5a0:·643d·2269·646d·3130·3534·3322·3e3c·7461··d="idm10543"><ta | |||
| 0003a5b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a5d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a5e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a5f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a600:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a610:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a620:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a630:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a640:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a650:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a670:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a680:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003a690:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a6a0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003a6b0:·7374·616c·6c20·646e·662d·6175·746f·6d61··stall·dnf-automa | |||
| 0003a | 0003a6c0:·7469·630a·3c2f·636f·6465·3e3c·2f70·7265··tic.</code></pre | ||
| 0003a | 0003a6d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003a | 0003a6e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003a | 0003a6f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003a | 0003a700:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003a | 0003a710:·7267·6574·3d22·2369·646d·3130·3534·3422··rget="#idm10544" | ||
| 0003a | 0003a720:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003a | 0003a730:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003a | 0003a740:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003a | 0003a750:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003a | 0003a760:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003a | 0003a770:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003a780:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003a230:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003a240:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a250:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a260:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a270:·2220·6964·3d22·6964·6d31·3035·3433·223e··"·id="idm10543"> | |||
| 0003a280:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| Max diff block lines reached; 2813641/2852861 bytes (98.63%) of diff not shown. | |||
| Offset 101, 31 lines modified | Offset 101, 57 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Gather·the·package·facts | ||
| 114 | ··package_facts: | ||
| 115 | ····manager:·auto | ||
| 116 | ··tags: | ||
| 117 | ··-·enable_strategy | ||
| 118 | ··-·low_complexity | ||
| 119 | ··-·low_disruption | ||
| 120 | ··-·medium_severity | ||
| 121 | ··-·no_reboot_needed | ||
| 122 | ··-·package_dnf-automatic_installed | ||
| 109 | 123 | -·name:·Ensure·dnf-automatic·is·installed | |
| 124 | ··package: | ||
| 110 | name | 125 | ····name:·dnf-automatic |
| 111 | 126 | ····state:·present | |
| 127 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 128 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 129 | ansible_facts.packages | ||
| 130 | ····) | ||
| 131 | ··tags: | ||
| 132 | ··-·enable_strategy | ||
| 133 | ··-·low_complexity | ||
| 134 | ··-·low_disruption | ||
| 135 | ··-·medium_severity | ||
| 136 | ··-·no_reboot_needed | ||
| 137 | ··-·package_dnf-automatic_installed | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_dnf-automatic | ||
| 118 | c | 143 | package·install·dnf-automatic |
| 119 | ··package·{·'dnf-automatic': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | 144 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 145 | [[packages]] | ||
| 146 | name·=·"dnf-automatic" | ||
| 147 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 154 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 134, 66 lines modified | Offset 160, 40 lines modified | ||
| 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 160 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 135 | ····dnf·install·-y·"dnf-automatic" | 161 | ····dnf·install·-y·"dnf-automatic" |
| 136 | fi | 162 | fi |
| 137 | else | 163 | else |
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 139 | fi | 165 | fi |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | dnf·install·dnf-automatic | 171 | dnf·install·dnf-automatic |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_dnf-automatic | ||
| 157 | -·name:·Gather·the·package·facts | ||
| 158 | ··package_facts: | ||
| 159 | ····manager:·auto | ||
| 160 | ··tags: | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_dnf-automatic_installed | ||
| 178 | class·install_dnf-automatic·{ | ||
| 179 | ··package·{·'dnf-automatic': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 167 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 168 | ··package: | ||
| 169 | ····name:·dnf-automatic | ||
| 170 | ····state:·present | ||
| 171 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 172 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 173 | ansible_facts.packages | ||
| 174 | ····) | ||
| 175 | ··tags: | ||
| 176 | ··-·enable_strategy | ||
| 177 | ··-·low_complexity | ||
| 178 | ··-·low_disruption | ||
| 179 | ··-·medium_severity | ||
| 180 | ··-·no_reboot_needed | ||
| 181 | ··-·package_dnf-automatic_installed | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package· | 188 | package·--add=dnf-automatic |
| Max diff block lines reached; 195786/200726 bytes (97.54%) of diff not shown. | |||
| Offset 15225, 278 lines modified | Offset 15225, 278 lines modified | ||
| 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | ||
| 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b7f0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b800:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b810:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b820:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b830:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | |||
| 0003b840:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b850:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b860:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b870:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b880:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b890:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b8a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b8b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b7f0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b800:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b810:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b820:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b830:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b840:·643d·2269·646d·3733·3331·223e·3c70·7265··d="idm7331"><pre | |||
| 0003b850:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b860:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b870:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b880:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b890:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b8a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b8b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b8c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b8d0:·743d·2223·6964·6d37·3333·3222·2074·6162··t="#idm7332"·tab | |||
| 0003b8e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b900:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b910:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b920:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b930:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b940:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b950:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b960:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b970:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b980:·3d22·6964·6d37·3333·3222·3e3c·7461·626c··="idm7332"><tabl | |||
| 0003b990:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b9a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b9b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b9c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ba00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ba10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ba30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ba40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ba50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ba60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ba70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba80:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003ba90:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003baa0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003bab0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bac0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bad0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bae0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003baf0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bb00:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bb10:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bb20:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bb30:·7461·7267·6574·3d22·2369·646d·3733·3333··target="#idm7333 | |||
| 0003bb40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bb50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bb60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bb70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bb80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bb90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bba0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bbb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bbc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bbe0:·2069·643d·2269·646d·3733·3333·223e·3c74···id="idm7333"><t | |||
| 0003bbf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bc00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bc10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bc40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bc50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bc70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bc80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bc90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bca0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bcb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bcc0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bcd0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bce0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003bcf0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003bd00:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003bd10:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003bd20:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003bd30:·726e·656c·3b20·7468·656e·0a0a·6966·2021··rnel;·then..if·! | |||
| 0003bd40:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003bd50:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003bd60:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003bd70:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003bd80:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003bd90:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003bda0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003bdb0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003bdc0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003bdd0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bde0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bdf0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003be00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003be10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003be20:·3733·3334·2220·7461·6269·6e64·6578·3d22··7334"·tabindex=" | |||
| 0003be30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003be40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003be50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003be60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003be70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003be80:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 0003be90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 24231825/24268837 bytes (99.85%) of diff not shown. | |||
| Offset 15187, 278 lines modified | Offset 15187, 278 lines modified | ||
| 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b590:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b5b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b5c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5d0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b650:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b590:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b5a0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b5b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5e0:·6d37·3333·3122·3e3c·7072·653e·3c63·6f64··m7331"><pre><cod | |||
| 0003b5f0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b600:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b610:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b620:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b630:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b640:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b650:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b660:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b670:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003b680:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b690:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b6a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b6b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b6c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b6d0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b6e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b6f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b700:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b710:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b720:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b730:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b740:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b750:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b760:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b770:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b660:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b790:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b7a0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b7c0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b7d0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b7e0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b7f0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b810:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b820:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b830:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b840:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b850:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b860:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b870:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b880:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b890:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b8a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b8b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b8c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b8d0:·743d·2223·6964·6d37·3333·3322·2074·6162··t="#idm7333"·tab | |||
| 0003b8e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b900:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b910:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b920:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b930:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b940:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b950:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b960:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b970:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b980:·6964·6d37·3333·3322·3e3c·7461·626c·6520··idm7333"><table· | |||
| 0003b990:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b9a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b9b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b9c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b9d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b9e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b9f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ba00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ba10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ba30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ba40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ba50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ba60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ba70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ba80:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003ba90:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003baa0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003bab0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003bac0:·7175·6965·7420·2d71·206b·6572·6e65·6c3b··quiet·-q·kernel; | |||
| 0003bad0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003bae0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003baf0:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003bb00:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003bb10:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003bb20:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003bb30:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003bb40:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003bb50:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003bb60:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003bb70:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bb80:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bb90:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bba0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bbb0:·6172·6765·743d·2223·6964·6d37·3333·3422··arget="#idm7334" | |||
| 0003bbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bc20:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003bc30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| Max diff block lines reached; 11113294/11150306 bytes (99.67%) of diff not shown. | |||
| Offset 120, 60 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·rpm·--quiet·-q·kernel;·then | ||
| 149 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 150 | ····dnf·install·-y·"aide" | ||
| 151 | fi | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·--add=aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | dnf·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 173 | ··package_facts: | 133 | ··package_facts: |
| Offset 209, 14 lines modified | Offset 163, 60 lines modified | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | package·install·aide | 168 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 217 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 219 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 220 | To·initiate·a·manual·check,·run·the·following·command: | 214 | To·initiate·a·manual·check,·run·the·following·command: |
| 221 | $·sudo·/usr/sbin/aide·--check | 215 | $·sudo·/usr/sbin/aide·--check |
| Offset 234, 28 lines modified | Offset 234, 14 lines modified | ||
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1319867/1324873 bytes (99.62%) of diff not shown. | |||
| Offset 15178, 278 lines modified | Offset 15178, 278 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b540:·2069·643d·2269·646d·3733·3331·223e·3c74···id="idm7331"><t | |||
| 0003b550:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b560:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b570:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b580:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b590:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b5a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b5c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b500:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b510:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b520:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b530:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b540:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b550:·646d·3733·3331·223e·3c70·7265·3e3c·636f··dm7331"><pre><co | |||
| 0003b560:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b570:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b580:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b590:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5a0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5b0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5c0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5d0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b5e0:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003b5f0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b600:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b610:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b620:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b630:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b640:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b650:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b660:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b670:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b680:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b690:·6d37·3333·3222·3e3c·7461·626c·6520·636c··m7332"><table·cl | |||
| 0003b6a0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b6b0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b6c0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b6d0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b6e0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b5d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b700:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b710:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b730:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b740:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b750:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b760:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b770:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b780:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b790:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b7a0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b7b0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b7c0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b7d0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b7e0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b7f0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b800:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b810:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b820:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b830:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b840:·6574·3d22·2369·646d·3733·3333·2220·7461··et="#idm7333"·ta | |||
| 0003b850:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b860:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b870:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b880:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b890:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b8a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b8b0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b8c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b8d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b8e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b8f0:·2269·646d·3733·3333·223e·3c74·6162·6c65··"idm7333"><table | |||
| 0003b900:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b910:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b920:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b930:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b940:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b950:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b960:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b970:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b980:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b990:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b9a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b9b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b9c0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b9d0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b9e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b9f0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003ba00:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003ba10:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003ba20:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | |||
| 0003ba30:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003ba40:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003ba50:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003ba60:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003ba70:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003ba80:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003ba90:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003baa0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bab0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003bac0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003bad0:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003bae0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003baf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bb00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bb10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bb20:·7461·7267·6574·3d22·2369·646d·3733·3334··target="#idm7334 | |||
| 0003bb30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bb40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bb50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bb60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bb70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bb80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bb90:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003bba0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 10732302/10769314 bytes (99.66%) of diff not shown. | |||
| Offset 118, 60 lines modified | Offset 118, 14 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 171 | ··package_facts: | 131 | ··package_facts: |
| Offset 207, 14 lines modified | Offset 161, 60 lines modified | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 212 | package·install·aide | 166 | package·install·aide |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····dnf·install·-y·"aide" | ||
| 180 | fi | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | dnf·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | include·install_aide | ||
| 196 | class·install_aide·{ | ||
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 211 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 218 | To·initiate·a·manual·check,·run·the·following·command: | 212 | To·initiate·a·manual·check,·run·the·following·command: |
| 219 | $·sudo·/usr/sbin/aide·--check | 213 | $·sudo·/usr/sbin/aide·--check |
| Offset 232, 28 lines modified | Offset 232, 14 lines modified | ||
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1263700/1268706 bytes (99.61%) of diff not shown. | |||
| Offset 15216, 279 lines modified | Offset 15216, 279 lines modified | ||
| 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | ||
| 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b760:·6d65·6469·6174·696f·6e20·4 | 0003b760:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b770:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b780:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b790:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b7a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b7b0:·6d37·3333·3122·3e3c·7461·626c·6520·636c··m7331"><table·cl | |||
| 0003b7c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b7d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b7e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b7f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b800:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b810:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b820:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b770:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b780:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b790:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b7a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7b0:·7365·2220·6964·3d22·6964·6d37·3333·3122··se"·id="idm7331" | |||
| 0003b7c0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b7d0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b7e0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b7f0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b800:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b810:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b820:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b830:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b840:·7461·7267·6574·3d22·2369·646d·3733·3332··target="#idm7332 | |||
| 0003b850:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b860:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b870:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b880:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b890:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b8a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b8b0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b8c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b8d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8f0:·6522·2069·643d·2269·646d·3733·3332·223e··e"·id="idm7332"> | |||
| 0003b900:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b910:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b920:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b930:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b940:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b830:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b840:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003b850:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b860:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b870:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b880:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b890:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b8a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b8b0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b8c0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b8d0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b8e0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b8f0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b900:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b910:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b920:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b930:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b940:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b950:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b960:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b970:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b980:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b990:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b9a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b9b0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b9c0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b9d0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9e0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9f0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003ba00:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003ba10:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ba20:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003ba30:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003ba40:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003ba50:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003ba60:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003ba70:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003ba80:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003ba90:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003baa0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003bab0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003bac0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bad0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003bae0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003baf0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003bb00:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003bb10:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003bb20:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003bb30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bb40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bb70:·6765·743d·2223·6964·6d37·3333·3222·2074··get="#idm7332"·t | |||
| 0003bb80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bb90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bba0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bbb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bbc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bbd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bbe0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bbf0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bc00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bc10:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bc20:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003bc30:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bc40:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bc50:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bc60:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bc70:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003bc80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003bc90:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003bca0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003bcb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b9c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b9f0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| Max diff block lines reached; 24056624/24093774 bytes (99.85%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | ||
| 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ba90:·6e20· | 0003ba90:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003baa0:·87b2 | 0003baa0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003bab0:·6c61 | 0003bab0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003bac0:·6 | 0003bac0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bad0:·643d | 0003bad0:·2220·6964·3d22·6964·6d36·3939·3322·3e3c··"·id="idm6993">< | ||
| 0003bae0:· | 0003bae0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003baf0:· | 0003baf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bb00:· | 0003bb00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bb10:· | 0003bb10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bb20:· | 0003bb20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bb30:· | 0003bb30:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003bb40:·6 | 0003bb40:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003bb50:· | 0003bb50:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bb60:·7 | 0003bb60:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003bb70:·6 | 0003bb70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bb80:· | 0003bb80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bb90:·6 | 0003bb90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bba0:· | 0003bba0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bbb0:· | 0003bbb0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003bbc0:· | 0003bbc0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bbd0:· | 0003bbd0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003bbe0:·6 | 0003bbe0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003bbf0:· | 0003bbf0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bc00:· | 0003bc00:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bc10:· | 0003bc10:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bc20:· | 0003bc20:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003bc30:· | 0003bc30:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003bc40:· | 0003bc40:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bc50:· | 0003bc50:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bc60:·2 | 0003bc60:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bc70:· | 0003bc70:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bc80:· | 0003bc80:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc90:· | 0003bc90:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bca0:·5 | 0003bca0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bcb0:· | 0003bcb0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bcc0:·2 | 0003bcc0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bcd0:· | 0003bcd0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bce0:·2 | 0003bce0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bcf0:· | 0003bcf0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bd00:· | 0003bd00:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bd10:· | 0003bd10:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bd20:· | 0003bd20:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bd30:· | 0003bd30:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bd40:· | 0003bd40:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bd50:· | 0003bd50:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bd60:· | 0003bd60:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bd70:· | 0003bd70:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bd80:· | 0003bd80:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bd90:· | 0003bd90:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003bda0:·6 | 0003bda0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003bdb0:· | 0003bdb0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003bdc0:·20 | 0003bdc0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003bdd0:· | 0003bdd0:·6e64·270a·2020·7365·745f·6661·6374·3a0a··nd'.··set_fact:. | ||
| 0003bde0:·2 | 0003bde0:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003bdf0:·6 | 0003bdf0:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003be00:·6 | 0003be00:·643a·2064·6e66·2072·6569·6e73·7461·6c6c··d:·dnf·reinstall | ||
| 0003be10:·2 | 0003be10:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003be20:·6 | 0003be20:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003be30:· | 0003be30:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003be40:·7 | 0003be40:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003be50:·6 | 0003be50:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003be60:·6 | 0003be60:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003be70:· | 0003be70:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003be80:· | 0003be80:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003be90:· | 0003be90:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003bea0:· | 0003bea0:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003beb0:· | 0003beb0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003bec0:·6 | 0003bec0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bed0:·6 | 0003bed0:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003bee0:· | 0003bee0:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003bef0:·6 | 0003bef0:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003bf00:· | 0003bf00:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003bf10:· | 0003bf10:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003bf20:· | 0003bf20:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003bf30:· | 0003bf30:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003bf40:· | 0003bf40:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003bf50:·2 | 0003bf50:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003bf60:· | 0003bf60:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003bf70:· | 0003bf70:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003bf80:· | 0003bf80:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003bf90:·3 | 0003bf90:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003bfa0:·2 | 0003bfa0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bfb0:· | 0003bfb0:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003bfc0:· | 0003bfc0:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003bfd0:· | 0003bfd0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bfe0:· | 0003bfe0:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003bff0:·3 | 0003bff0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c000:· | 0003c000:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c010:· | 0003c010:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c020:· | 0003c020:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c030:· | 0003c030:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c040:· | 0003c040:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c050:· | 0003c050:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c060:· | 0003c060:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c070:· | 0003c070:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003c080:· | 0003c080:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003c090:· | 0003c090:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003c0a0:· | 0003c0a0:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003c0b0:· | 0003c0b0:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003c0c0:· | 0003c0c0:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003c0d0:· | 0003c0d0:·636f·6d6d·616e·6420·287a·7970·7065·7229··command·(zypper) | ||
| 0003c0e0:· | 0003c0e0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003c0f0:·2 | 0003c0f0:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003c100:· | 0003c100:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003c110:· | 0003c110:·207a·7970·7065·7220·696e·202d·6620·2d79···zypper·in·-f·-y | ||
| 0003c120:· | 0003c120:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003c130:· | 0003c130:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003c140:· | 0003c140:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c150:· | 0003c150:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003c160:· | 0003c160:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003c170:· | 0003c170:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c180:· | 0003c180:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003c190:· | 0003c190:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c1a0:· | 0003c1a0:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003c1b0:·6 | 0003c1b0:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| 0003c1c0:· | 0003c1c0:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | ||
| 0003c1d0:· | 0003c1d0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c1e0:·20 | 0003c1e0:·0a20·2020·2029·0a20·202d·2061·6e73·6962··.····).··-·ansib | ||
| 0003c1f0:· | 0003c1f0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| Max diff block lines reached; 6337516/6392468 bytes (99.14%) of diff not shown. | |||
| Offset 120, 33 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 145 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 133 | ··package_facts: |
| Offset 313, 14 lines modified | Offset 294, 33 lines modified | ||
| 313 | ··-·PCI-DSSv4-11.5.2 | 294 | ··-·PCI-DSSv4-11.5.2 |
| 314 | ··-·high_complexity | 295 | ··-·high_complexity |
| 315 | ··-·high_severity | 296 | ··-·high_severity |
| 316 | ··-·medium_disruption | 297 | ··-·medium_disruption |
| 317 | ··-·no_reboot_needed | 298 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 299 | ··-·restrict_strategy |
| 319 | ··-·rpm_verify_hashes | 300 | ··-·rpm_verify_hashes |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 303 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 304 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 305 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 306 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 307 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 308 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 309 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 310 | fi | ||
| 311 | else | ||
| 312 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 313 | fi | ||
| 320 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 314 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 321 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 315 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 322 | ····*·GnuTLS·library | 316 | ····*·GnuTLS·library |
| 323 | ····*·OpenSSL·library | 317 | ····*·OpenSSL·library |
| 324 | ····*·NSS·library | 318 | ····*·NSS·library |
| 325 | ····*·OpenJDK | 319 | ····*·OpenJDK |
| 326 | ····*·Libkrb5 | 320 | ····*·Libkrb5 |
| Offset 341, 58 lines modified | Offset 341, 14 lines modified | ||
| 341 | ············_\x8i_\x8s_\x8m······1446 | 341 | ············_\x8i_\x8s_\x8m······1446 |
| 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | ············_\x8c_\x8i_\x8s······1.6.1 | 346 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | var_system_crypto_policy='DEFAULT' | ||
| 350 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 351 | rc=$? | ||
| 352 | if·test·"$rc"·=·127;·then | ||
| 353 | » echo·"$stderr_of_call"·>&2 | ||
| 354 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 355 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 356 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 357 | » false··#·end·with·an·error·code | ||
| 358 | elif·test·"$rc"·!=·0;·then | ||
| 359 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | fi | ||
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 367 | --- | ||
| 368 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 369 | kind:·MachineConfig | ||
| 370 | spec: | ||
| 371 | ··config: | ||
| 372 | ····ignition: | ||
| 373 | ······version:·3.1.0 | ||
| 374 | ····systemd: | ||
| 375 | ······units: | ||
| 376 | ········-·name:·configure-crypto-policy.service | ||
| 377 | ··········enabled:·true | ||
| 378 | ··········contents:·| | ||
| 379 | ············[Unit] | ||
| 380 | ············Before=kubelet.service | ||
| 381 | ············[Service] | ||
| 382 | ············Type=oneshot | ||
| 383 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 384 | ············RemainAfterExit=yes | ||
| 385 | ············[Install] | ||
| 386 | ············WantedBy=multi-user.target | ||
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 392 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 353 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 393 | ··set_fact: | 354 | ··set_fact: |
| Offset 437, 33 lines modified | Offset 393, 72 lines modified | ||
| Max diff block lines reached; 713806/719755 bytes (99.17%) of diff not shown. | |||
| Offset 15293, 408 lines modified | Offset 15293, 408 lines modified | ||
| 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | ||
| 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003bc30:· | 0003bc30:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003bc40:·3c2f | 0003bc40:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003bc50:· | 0003bc50:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003bc60:·7365 | 0003bc60:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003bc70:·2269 | 0003bc70:·6964·3d22·6964·6d36·3939·3322·3e3c·7461··id="idm6993"><ta | ||
| 0003bc80:·6 | 0003bc80:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003bc90:· | 0003bc90:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003bca0:· | 0003bca0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003bcb0:· | 0003bcb0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003bcc0:· | 0003bcc0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003bcd0:· | 0003bcd0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003bce0:· | 0003bce0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bcf0:· | 0003bcf0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bd00:· | 0003bd00:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003bd10:·3 | 0003bd10:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003bd20:· | 0003bd20:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003bd30:·3 | 0003bd30:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bd40:· | 0003bd40:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003bd50:·6 | 0003bd50:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003bd60:· | 0003bd60:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003bd70:· | 0003bd70:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003bd80:·6 | 0003bd80:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003bd90:·6 | 0003bd90:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003bda0:·6 | 0003bda0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003bdb0:· | 0003bdb0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003bdc0:· | 0003bdc0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003bdd0:· | 0003bdd0:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003bde0:· | 0003bde0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003bdf0:· | 0003bdf0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003be00:· | 0003be00:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003be10:· | 0003be10:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003be20:· | 0003be20:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003be30:· | 0003be30:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003be40:· | 0003be40:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003be50:· | 0003be50:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003be60:· | 0003be60:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003be70:· | 0003be70:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003be80:· | 0003be80:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003be90:·2 | 0003be90:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003bea0:· | 0003bea0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003beb0:· | 0003beb0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003bec0:·2 | 0003bec0:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003bed0:· | 0003bed0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003bee0:·6 | 0003bee0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003bef0:·6 | 0003bef0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003bf00:· | 0003bf00:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bf10:· | 0003bf10:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bf20:· | 0003bf20:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bf30:· | 0003bf30:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| 0003bf40:·6 | 0003bf40:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003bf50:·6 | 0003bf50:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003bf60:· | 0003bf60:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003bf70:· | 0003bf70:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003bf80:· | 0003bf80:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003bf90:·7 | 0003bf90:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003bfa0:· | 0003bfa0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bfb0:· | 0003bfb0:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003bfc0:· | 0003bfc0:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003bfd0:·6 | 0003bfd0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bfe0:· | 0003bfe0:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003bff0:·6 | 0003bff0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003c000:·6 | 0003c000:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003c010:· | 0003c010:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003c020:· | 0003c020:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c030:·7 | 0003c030:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003c040:· | 0003c040:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003c050:·7 | 0003c050:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003c060:· | 0003c060:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003c070:·20 | 0003c070:·730a·2020·2020·290a·2020·2d20·616e·7369··s.····).··-·ansi | ||
| 0003c080:· | 0003c080:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | ||
| 0003c090:·206 | 0003c090:·2069·6e20·5b20·2246·6564·6f72·6122·2c20···in·[·"Fedora",· | ||
| 0003c0a0:· | 0003c0a0:·2252·6564·4861·7422·2c20·2243·656e·744f··"RedHat",·"CentO | ||
| 0003c0b0:· | 0003c0b0:·5322·2c20·224f·7261·636c·654c·696e·7578··S",·"OracleLinux | ||
| 0003c0c0:· | 0003c0c0:·2220·5d0a·2020·7461·6773·3a0a·2020·2d20··"·].··tags:.··-· | ||
| 0003c0d0:· | 0003c0d0:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003c0e0:· | 0003c0e0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c0f0:· | 0003c0f0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003c100:·3 | 0003c100:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003c110:· | 0003c110:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003c120:· | 0003c120:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003c130:· | 0003c130:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003c140:· | 0003c140:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c150:· | 0003c150:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003c160:· | 0003c160:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003c170:· | 0003c170:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003c180:· | 0003c180:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c190:· | 0003c190:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003c1a0:·2 | 0003c1a0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003c1b0:· | 0003c1b0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003c1c0:· | 0003c1c0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003c1d0:·6 | 0003c1d0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003c1e0:· | 0003c1e0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003c1f0:· | 0003c1f0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003c200:·202 | 0003c200:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003c210:· | 0003c210:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003c220:·5 | 0003c220:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003c230:· | 0003c230:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003c240:· | 0003c240:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003c250:· | 0003c250:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003c260:· | 0003c260:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003c270:· | 0003c270:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003c280:·2 | 0003c280:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003c290:· | 0003c290:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003c2a0:· | 0003c2a0:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003c2b0:· | 0003c2b0:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003c2c0:·20 | 0003c2c0:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003c2d0:· | 0003c2d0:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003c2e0:· | 0003c2e0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c2f0:· | 0003c2f0:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003c300:·2 | 0003c300:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003c310:· | 0003c310:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003c320:· | 0003c320:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003c330:·6 | 0003c330:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c340:· | 0003c340:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003c350:·202 | 0003c350:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003c360:·6 | 0003c360:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003c370:· | 0003c370:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003c380:· | 0003c380:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003c390:·5 | 0003c390:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | ||
| Max diff block lines reached; 19380776/19435728 bytes (99.72%) of diff not shown. | |||
| Offset 15203, 279 lines modified | Offset 15203, 279 lines modified | ||
| 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | ||
| 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b690:·6564·6961·7469·6f6e·204 | 0003b690:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b6a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b6b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b6c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b6d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b6e0:·3733·3331·223e·3c74·6162·6c65·2063·6c61··7331"><table·cla | |||
| 0003b6f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b700:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b710:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b720:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b730:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b740:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b750:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b6a0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b6b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b6c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6e0:·6522·2069·643d·2269·646d·3733·3331·223e··e"·id="idm7331"> | |||
| 0003b6f0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b700:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b710:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b720:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b730:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b740:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b750:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b760:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b770:·6172·6765·743d·2223·6964·6d37·3333·3222··arget="#idm7332" | |||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b7e0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b7f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b800:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b810:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b820:·2220·6964·3d22·6964·6d37·3333·3222·3e3c··"·id="idm7332">< | |||
| 0003b830:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b840:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b850:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b860:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b870:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b760:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b770:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b8a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b8b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b8c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b8d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b8e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b8f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b900:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b910:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b920:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b930:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b940:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b950:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b960:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b970:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b980:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b990:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b9a0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b9b0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b9c0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9e0:·3733·3333·2220·7461·6269·6e64·6578·3d22··7333"·tabindex=" | |||
| 0003b9f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ba00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ba10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ba20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003ba50:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ba60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ba70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ba80:·7073·6522·2069·643d·2269·646d·3733·3333··pse"·id="idm7333 | |||
| 0003ba90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003baa0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bab0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bac0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bad0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bae0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003baf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bb00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bb10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bb20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bb30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bb40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bb50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bb60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bb70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bb80:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003bb90:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003bba0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003bbb0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003bbc0:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003bbd0:·7120·6b65·726e·656c·3b20·7468·656e·0a0a··q·kernel;·then.. | |||
| 0003bbe0:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003bbf0:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003bc00:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003bc10:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003bc20:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003bc30:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003bc40:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003bc50:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003bc60:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003bc70:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc80:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc90:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bca0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bcb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bcc0:·2369·646d·3733·3334·2220·7461·6269·6e64··#idm7334"·tabind | |||
| 0003bcd0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bce0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bcf0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bd00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bd10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bd20:·5265·6d65·6469·6174·696f·6e20·416e·6163··Remediation·Anac | |||
| 0003bd30:·6f6e·6461·2073·6e69·7070·6574·20e2·87b2··onda·snippet·... | |||
| 0003bd40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| Max diff block lines reached; 10791736/10828886 bytes (99.66%) of diff not shown. | |||
| Offset 122, 60 lines modified | Offset 122, 14 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 175 | ··package_facts: | 135 | ··package_facts: |
| Offset 211, 14 lines modified | Offset 165, 60 lines modified | ||
| 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 216 | package·install·aide | 170 | package·install·aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····dnf·install·-y·"aide" | ||
| 184 | fi | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | include·install_aide | ||
| 200 | class·install_aide·{ | ||
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 217 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 218 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 219 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 220 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 58 lines modified | Offset 291, 14 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134322/1139861 bytes (99.51%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | ||
| 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b6d0:·6469·6174·696f·6e20·4 | 0003b6d0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b6e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b6f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b700:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b710:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b720:·3333·3122·3e3c·7461·626c·6520·636c·6173··331"><table·clas | |||
| 0003b730:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b740:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b750:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b760:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b770:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b780:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b790:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b6e0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b6f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b700:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b710:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b720:·2220·6964·3d22·6964·6d37·3333·3122·3e3c··"·id="idm7331">< | |||
| 0003b730:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b740:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b750:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b760:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b770:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b780:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b790:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b7a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b7b0:·7267·6574·3d22·2369·646d·3733·3332·2220··rget="#idm7332"· | |||
| 0003b7c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b7d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b7e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b7f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b800:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b810:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b820:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b830:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b840:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b850:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b860:·2069·643d·2269·646d·3733·3332·223e·3c74···id="idm7332"><t | |||
| 0003b870:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b880:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b890:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b8a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b7a0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b7b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b940:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b950:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b960:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b970:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b980:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b990:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b9a0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b9b0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b9c0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b9d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b9e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b9f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ba00:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ba10:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003ba20:·3333·3322·2074·6162·696e·6465·783d·2230··333"·tabindex="0 | |||
| 0003ba30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ba40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ba50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ba60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ba70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003ba80:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003ba90:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003baa0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bab0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bac0:·7365·2220·6964·3d22·6964·6d37·3333·3322··se"·id="idm7333" | |||
| 0003bad0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bae0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003baf0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bb00:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bb10:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bb20:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bb30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bb40:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bb60:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bb70:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bb80:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bb90:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bba0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bbb0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bbc0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003bbd0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003bbe0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003bbf0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003bc00:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003bc10:·206b·6572·6e65·6c3b·2074·6865·6e0a·0a69···kernel;·then..i | |||
| 0003bc20:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003bc30:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003bc40:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003bc50:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003bc60:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003bc70:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003bc80:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003bc90:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003bca0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003bcb0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bcc0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bcd0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bce0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bcf0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bd00:·6964·6d37·3333·3422·2074·6162·696e·6465··idm7334"·tabinde | |||
| 0003bd10:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bd20:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bd30:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bd40:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bd50:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bd60:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003bd70:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003bd80:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| Max diff block lines reached; 10791736/10828886 bytes (99.66%) of diff not shown. | |||
| Offset 123, 60 lines modified | Offset 123, 14 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····dnf·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | package·--add=aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | dnf·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | -·name:·Gather·the·package·facts | 135 | -·name:·Gather·the·package·facts |
| 176 | ··package_facts: | 136 | ··package_facts: |
| Offset 212, 14 lines modified | Offset 166, 60 lines modified | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package·install·aide | 171 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 218 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 219 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 220 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 221 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 222 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 292, 58 lines modified | Offset 292, 14 lines modified | ||
| 292 | ············_\x8i_\x8s_\x8m······1446 | 292 | ············_\x8i_\x8s_\x8m······1446 |
| 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134322/1139861 bytes (99.51%) of diff not shown. | |||
| Offset 15205, 278 lines modified | Offset 15205, 278 lines modified | ||
| 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b6b0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b6c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b6d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b6e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b6f0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b700:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b710:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b720:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b730:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b740:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b750:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b760:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b770:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b6c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b6e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b6f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b700:·6d37·3333·3122·3e3c·7072·653e·3c63·6f64··m7331"><pre><cod | |||
| 0003b710:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b720:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b730:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b740:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b750:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b760:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b770:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b780:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b790:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003b7a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b7b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b7c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b7d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b7e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b7f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b800:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b810:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b820:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b830:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b840:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b850:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b860:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b870:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b880:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b890:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b780:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b8b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b790:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b7a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b7b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b8e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b8f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b900:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b910:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b920:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b930:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b940:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b950:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b960:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b970:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b980:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b990:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b9a0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b9b0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b9c0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b9d0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b9e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b9f0:·743d·2223·6964·6d37·3333·3322·2074·6162··t="#idm7333"·tab | |||
| 0003ba00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ba10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ba20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ba30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ba40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ba50:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003ba60:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003ba70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003baa0:·6964·6d37·3333·3322·3e3c·7461·626c·6520··idm7333"><table· | |||
| 0003bab0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bac0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bad0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bae0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003baf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bb00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bb10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003bb20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bb30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bb40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bb50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003bb60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003bb70:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003bb80:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bb90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bba0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003bbb0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003bbc0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003bbd0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003bbe0:·7175·6965·7420·2d71·206b·6572·6e65·6c3b··quiet·-q·kernel; | |||
| 0003bbf0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003bc00:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003bc10:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003bc20:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003bc30:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003bc40:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003bc50:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003bc60:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003bc70:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003bc80:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003bc90:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bca0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bcb0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bcc0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bcd0:·6172·6765·743d·2223·6964·6d37·3333·3422··arget="#idm7334" | |||
| 0003bce0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bcf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bd20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd40:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| Max diff block lines reached; 10790220/10827232 bytes (99.66%) of diff not shown. | |||
| Offset 122, 60 lines modified | Offset 122, 14 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 175 | ··package_facts: | 135 | ··package_facts: |
| Offset 211, 14 lines modified | Offset 165, 60 lines modified | ||
| 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 216 | package·install·aide | 170 | package·install·aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····dnf·install·-y·"aide" | ||
| 184 | fi | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | include·install_aide | ||
| 200 | class·install_aide·{ | ||
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 217 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 218 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 219 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 220 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 58 lines modified | Offset 291, 14 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134322/1139861 bytes (99.51%) of diff not shown. | |||
| Offset 15477, 250 lines modified | Offset 15477, 250 lines modified | ||
| 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | ||
| 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003c7c0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c7d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c7e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c7f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c800:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003c810:·3535·223e·3c70·7265·3e3c·636f·6465·3e0a··55"><pre><code>. | |||
| 0003c | 0003c7c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c800:·2269·646d·3739·3535·223e·3c74·6162·6c65··"idm7955"><table | |||
| 0003c810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c850:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c890:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c8a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c8b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c8c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c8d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c8e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c8f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c900:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003c910:·2063·7279·7074·6f2d·706f·6c69·6369·6573···crypto-policies | |||
| 0003c920:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c930:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c | 0003c940:·653a·2063·7279·7074·6f2d·706f·6c69·6369··e:·crypto-polici | ||
| 0003c840:·6369·6573·220a·7665·7273·696f·6e20·3d20··cies".version·=· | |||
| 0003c850:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003c860:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c870:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c880:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c890:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c8a0:·7267·6574·3d22·2369·646d·3739·3536·2220··rget="#idm7956"· | |||
| 0003c8b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c8c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c8d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c8e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c8f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c900:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c910:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003c920:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c930:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c940:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c950:·2069·643d·2269·646d·3739·3536·223e·3c74···id="idm7956"><t | |||
| 0003c960:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c970:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c980:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c990:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c9a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c9b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c9c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c9 | 0003c950:·6573·0a20·2020·2073·7461·7465·3a20·7072··es.····state:·pr | ||
| 0003c960:·6573·656e·740a·2020·7461·6773·3a0a·2020··esent.··tags:.·· | |||
| 0003c970:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c980:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c990:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c9a0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c9b0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c9c0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c9d0:·0a20·202d·2070·6163·6b61·6765·5f63·7279··.··-·package_cry | |||
| 0003c9e0:·7074·6f2d·706f·6c69·6369·6573·5f69·6e73··pto-policies_ins | |||
| 0003c9f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003ca00:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ca10:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ca20:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ca30:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ca40:·2d74·6172·6765·743d·2223·6964·6d37·3935··-target="#idm795 | |||
| 0003ca50:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003ca60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ca70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ca80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ca90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003caa0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003cab0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003cac0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003cad0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003cae0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003caf0:·6964·6d37·3935·3622·3e3c·7461·626c·6520··idm7956"><table· | |||
| 0003cb00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003cb10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003cb20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003cb30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003cb40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c | 0003cb50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003cb60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c9f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ca00:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ca10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ca20:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ca30:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ca40:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ca50:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003ca60:·7374·616c·6c5f·6372·7970·746f·2d70·6f6c··stall_crypto-pol | |||
| 0003ca70:·6963·6965·730a·0a63·6c61·7373·2069·6e73··icies..class·ins | |||
| 0003ca80:·7461·6c6c·5f63·7279·7074·6f2d·706f·6c69··tall_crypto-poli | |||
| 0003ca90:·6369·6573·207b·0a20·2070·6163·6b61·6765··cies·{.··package | |||
| 0003caa0:·207b·2027·6372·7970·746f·2d70·6f6c·6963···{·'crypto-polic | |||
| 0003cab0:·6965·7327·3a0a·2020·2020·656e·7375·7265··ies':.····ensure | |||
| 0003cac0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003cad0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003cae0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003caf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003cb00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003cb10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003cb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003cb30:·3739·3537·2220·7461·6269·6e64·6578·3d22··7957"·tabindex=" | |||
| 0003cb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003cb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003cb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003cb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003cb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003cb90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003cba0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003cbb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 6700850/6733998 bytes (99.51%) of diff not shown. | |||
| Offset 145, 77 lines modified | Offset 145, 77 lines modified | ||
| 145 | $·sudo·dnf·install·crypto-policies | 145 | $·sudo·dnf·install·crypto-policies |
| 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 147 | Severity: ··medium | 147 | Severity: ··medium |
| 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"crypto-policies" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | include·install_crypto-policies | ||
| 162 | class·install_crypto-policies·{ | ||
| 163 | ··package·{·'crypto-policies': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | 157 | -·name:·Ensure·crypto-policies·is·installed | |
| 158 | ··package: | ||
| 159 | ····name:·crypto-policies | ||
| 160 | ····state:·present | ||
| 161 | ··tags: | ||
| 162 | ··-·enable_strategy | ||
| 163 | ··-·low_complexity | ||
| 164 | ··-·low_disruption | ||
| 165 | ··-·medium_severity | ||
| 166 | ··-·no_reboot_needed | ||
| 167 | ··-·package_crypto-policies_installed | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 173 | ····dnf·install·-y·"crypto-policies" | ||
| 174 | 173 | package·install·crypto-policies | |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"crypto-policies" | ||
| 177 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | 183 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 184 | ····dnf·install·-y·"crypto-policies" | ||
| 185 | fi | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | dnf·install·crypto-policies | 191 | dnf·install·crypto-policies |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_crypto-policies | ||
| 198 | class·install_crypto-policies·{ | ||
| 199 | ··package·{·'crypto-policies': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 192 | -·name:·Ensure·crypto-policies·is·installed | ||
| 193 | ··package: | ||
| 194 | ····name:·crypto-policies | ||
| 195 | ····state:·present | ||
| 196 | ··tags: | ||
| 197 | ··-·enable_strategy | ||
| 198 | ··-·low_complexity | ||
| 199 | ··-·low_disruption | ||
| 200 | ··-·medium_severity | ||
| 201 | ··-·no_reboot_needed | ||
| 202 | ··-·package_crypto-policies_installed | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | package· | 208 | package·--add=crypto-policies |
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 226, 58 lines modified | Offset 226, 14 lines modified | ||
| 226 | ············_\x8i_\x8s_\x8m······1446 | 226 | ············_\x8i_\x8s_\x8m······1446 |
| 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 231 | ············_\x8c_\x8i_\x8s······1.6.1 | 231 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | var_system_crypto_policy='FIPS:OSPP' | ||
| 235 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 236 | rc=$? | ||
| 237 | if·test·"$rc"·=·127;·then | ||
| 238 | » echo·"$stderr_of_call"·>&2 | ||
| 239 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 240 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 241 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 242 | » false··#·end·with·an·error·code | ||
| 243 | elif·test·"$rc"·!=·0;·then | ||
| 244 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 245 | » false··#·end·with·an·error·code | ||
| Max diff block lines reached; 916436/924852 bytes (99.09%) of diff not shown. | |||
| Offset 15295, 408 lines modified | Offset 15295, 408 lines modified | ||
| 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | ||
| 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc50:·20 | 0003bc50:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003bc60:·b23c | 0003bc60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bc70:·6173 | 0003bc70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bc80:·7073 | 0003bc80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bc90:·3d | 0003bc90:·2069·643d·2269·646d·3639·3933·223e·3c74···id="idm6993"><t | ||
| 0003bca0:· | 0003bca0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bcb0:·6 | 0003bcb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bcc0:· | 0003bcc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bcd0:·6 | 0003bcd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003bce0:· | 0003bce0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bcf0:· | 0003bcf0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003bd00:· | 0003bd00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bd10:· | 0003bd10:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bd20:· | 0003bd20:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003bd30:· | 0003bd30:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bd40:· | 0003bd40:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bd50:·7 | 0003bd50:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bd60:· | 0003bd60:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003bd70:· | 0003bd70:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003bd80:·2 | 0003bd80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003bd90:·7 | 0003bd90:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003bda0:· | 0003bda0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003bdb0:· | 0003bdb0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003bdc0:·6 | 0003bdc0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003bdd0:· | 0003bdd0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003bde0:· | 0003bde0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003bdf0:· | 0003bdf0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003be00:· | 0003be00:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003be10:· | 0003be10:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003be20:· | 0003be20:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003be30:· | 0003be30:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003be40:·2 | 0003be40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003be50:· | 0003be50:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003be60:·2 | 0003be60:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003be70:· | 0003be70:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003be80:· | 0003be80:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003be90:· | 0003be90:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bea0:· | 0003bea0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003beb0:· | 0003beb0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bec0:· | 0003bec0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bed0:· | 0003bed0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bee0:· | 0003bee0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bef0:· | 0003bef0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bf00:· | 0003bf00:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bf10:· | 0003bf10:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bf20:· | 0003bf20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bf30:· | 0003bf30:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bf40:· | 0003bf40:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bf50:· | 0003bf50:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bf60:·6 | 0003bf60:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003bf70:· | 0003bf70:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003bf80:· | 0003bf80:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003bf90:·6 | 0003bf90:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003bfa0:· | 0003bfa0:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003bfb0:·6 | 0003bfb0:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003bfc0:· | 0003bfc0:·3a20·646e·6620·7265·696e·7374·616c·6c20··:·dnf·reinstall· | ||
| 0003bfd0:· | 0003bfd0:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003bfe0:· | 0003bfe0:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003bff0:·2 | 0003bff0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003c000:· | 0003c000:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003c010:· | 0003c010:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003c020:· | 0003c020:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c030:· | 0003c030:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003c040:·6 | 0003c040:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003c050:·6 | 0003c050:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003c060:·20 | 0003c060:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003c070:· | 0003c070:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003c080:· | 0003c080:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c090:·6 | 0003c090:·6573·0a20·2020·2029·0a20·202d·2061·6e73··es.····).··-·ans | ||
| 0003c0a0:· | 0003c0a0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c0b0:· | 0003c0b0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c0c0:· | 0003c0c0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c0d0:· | 0003c0d0:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c0e0:·7 | 0003c0e0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c0f0:· | 0003c0f0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c100:·20 | 0003c100:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c110:· | 0003c110:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c120:·3 | 0003c120:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c130:· | 0003c130:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c140:· | 0003c140:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c150:· | 0003c150:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c160:· | 0003c160:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c170:· | 0003c170:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c180:· | 0003c180:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c190:· | 0003c190:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c1a0:· | 0003c1a0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c1b0:· | 0003c1b0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c1c0:· | 0003c1c0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c1d0:· | 0003c1d0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c1e0:· | 0003c1e0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c1f0:·706 | 0003c1f0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c200:· | 0003c200:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c210:· | 0003c210:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c220:· | 0003c220:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c230:· | 0003c230:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003c240:· | 0003c240:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003c250:· | 0003c250:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003c260:· | 0003c260:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003c270:· | 0003c270:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003c280:· | 0003c280:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003c290:· | 0003c290:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | ||
| 0003c2a0:· | 0003c2a0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003c2b0:· | 0003c2b0:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003c2c0:· | 0003c2c0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003c2d0:· | 0003c2d0:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | ||
| 0003c2e0:·2 | 0003c2e0:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003c2f0:·2 | 0003c2f0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003c300:· | 0003c300:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003c310:· | 0003c310:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003c320:·2 | 0003c320:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003c330:·6 | 0003c330:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003c340:· | 0003c340:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003c350:· | 0003c350:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003c360:· | 0003c360:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003c370:· | 0003c370:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003c380:· | 0003c380:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003c390:· | 0003c390:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003c3a0:· | 0003c3a0:·2020·2020·290a·2020·2d20·616e·7369·626c······).··-·ansibl | ||
| 0003c3b0:· | 0003c3b0:·655f·6469·7374·7269·6275·7469·6f6e·203d··e_distribution·= | ||
| Max diff block lines reached; 16441584/16496536 bytes (99.67%) of diff not shown. | |||
| Offset 15212, 278 lines modified | Offset 15212, 278 lines modified | ||
| 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | ||
| 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b720:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b730:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b740:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b750:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b760:·7365·2220·6964·3d22·6964·6d37·3333·3122··se"·id="idm7331" | |||
| 0003b720:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b730:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b740:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b750:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b760:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b770:·3d22·6964·6d37·3333·3122·3e3c·7072·653e··="idm7331"><pre> | |||
| 0003b780:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b790:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b7a0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b7b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b7 | 0003b770:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b780:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b790:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b7c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b7d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b7e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b7d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b7e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b7f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b800:·3d22·2369·646d·3733·3332·2220·7461·6269··="#idm7332"·tabi | |||
| 0003b810:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b820:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b830:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b840:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b850:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b860:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b870:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b880:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b890:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b8a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b8b0:·2269·646d·3733·3332·223e·3c74·6162·6c65··"idm7332"><table | |||
| 0003b8c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b8d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b8e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b8f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b900:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b7f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b920:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b930:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b940:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b950:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b960:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b810:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b820:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b830:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b840:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b850:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b860:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b870:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b880:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b890:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b8a0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b8b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b8c0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b8d0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8e0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b8f0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b900:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b910:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b920:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b930:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b940:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b950:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b960:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b970:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b980:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b990:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b9a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b9b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b9c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b9d0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b9e0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b9f0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003ba00:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003ba10:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003ba20:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003ba30:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003ba40:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003ba50:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003ba60:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003ba70:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003ba80:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ba90:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003baa0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bab0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bac0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bad0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bae0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003baf0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bb00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bb10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bb20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bb30:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003bb40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bb50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bb60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bb70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bb80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bb90:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bba0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbc0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbd0:·2220·6964·3d22·6964·6d37·3333·3222·3e3c··"·id="idm7332">< | |||
| 0003bbe0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bbf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bc20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003bc30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b990:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b9a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b9b0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| Max diff block lines reached; 33338171/33375183 bytes (99.89%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | ||
| 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b6e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b6f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b700:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b710:·6170·7365·2220·6964·3d22·6964·6d37·3333··apse"·id="idm733 | |||
| 0003b720:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b730:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b740:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b750:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b760:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b770:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b780:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b790:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b6d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b6e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b6f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b700:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b710:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b720:·6964·3d22·6964·6d37·3333·3122·3e3c·7072··id="idm7331"><pr | |||
| 0003b730:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b740:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b750:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b760:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b770:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b780:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b790:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b7a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b7b0:·6574·3d22·2369·646d·3733·3332·2220·7461··et="#idm7332"·ta | |||
| 0003b7c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b7d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b7e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b800:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b810:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b820:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b830:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b840:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b850:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b860:·643d·2269·646d·3733·3332·223e·3c74·6162··d="idm7332"><tab | |||
| 0003b870:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b880:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b890:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b8b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b7a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b8d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b8e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b8f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b900:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b910:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b7b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b930:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b940:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b950:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b960:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b970:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b980:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b990:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b9a0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b9b0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b9c0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b9d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b9e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b9f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ba00:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ba10:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003ba20:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003ba30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ba40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ba50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ba60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ba70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ba80:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003ba90:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003baa0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bab0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bac0:·2220·6964·3d22·6964·6d37·3333·3322·3e3c··"·id="idm7333">< | |||
| 0003bad0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bae0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003baf0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bb00:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bb10:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bb20:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bb30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bb40:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bb50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bb60:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bb70:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bb80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bb90:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bba0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bbb0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bbc0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003bbd0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003bbe0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003bbf0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003bc00:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | |||
| 0003bc10:·6572·6e65·6c3b·2074·6865·6e0a·0a69·6620··ernel;·then..if· | |||
| 0003bc20:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | |||
| 0003bc30:·2022·6169·6465·2220·3b20·7468·656e·0a20···"aide"·;·then.· | |||
| 0003bc40:·2020·2064·6e66·2069·6e73·7461·6c6c·202d·····dnf·install·- | |||
| 0003bc50:·7920·2261·6964·6522·0a66·690a·0a65·6c73··y·"aide".fi..els | |||
| 0003bc60:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003bc70:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003bc80:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003bc90:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003bca0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003bcb0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bcc0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bcd0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bce0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bcf0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bd00:·6d37·3333·3422·2074·6162·696e·6465·783d··m7334"·tabindex= | |||
| 0003bd10:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bd20:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bd30:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bd40:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bd50:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bd60:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0003bd70:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| Max diff block lines reached; 33204258/33241408 bytes (99.89%) of diff not shown. | |||
| Offset 15181, 283 lines modified | Offset 15181, 283 lines modified | ||
| 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b530:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b530:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b540:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b550:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b560:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b570:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b580:·3d22·6964·6d38·3438·3022·3e3c·7461·626c··="idm8480"><tabl | |||
| 0003b590:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b5a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b5b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b5c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b5d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b5e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b5f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b600:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b540:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b550:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b560:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b570:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b580:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b590:·3438·3022·3e3c·7072·653e·3c63·6f64·653e··480"><pre><code> | |||
| 0003b5a0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b5b0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b5c0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b5d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b5e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b600:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b610:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b620:·3834·3831·2220·7461·6269·6e64·6578·3d22··8481"·tabindex=" | |||
| 0003b630:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b640:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b650:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b660:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b670:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b680:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b690:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b6a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b6b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b6c0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b6d0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003b6e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b700:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b710:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b720:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b610:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b740:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b620:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b630:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b640:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b650:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b780:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b790:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b7a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b7b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b660:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b670:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b680:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b690:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b6a0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b6b0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b6c0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b6d0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6e0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b6f0:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b700:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b710:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b720:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b730:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b740:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b750:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b760:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b770:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b780:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b790:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b7a0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b7b0:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b7c0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b7d0:· | 0003b7d0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | ||
| 0003b7e0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b7f0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b800:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b810:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b | 0003b7e0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | ||
| 0003b7f0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b800:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b810:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b820:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b830:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b840:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b850:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b860:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b870:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b880:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b890:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b8a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b8b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b8c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b8d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b8e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b8f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b900:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b910:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b920:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003b930:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b | 0003b940:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003b950:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b | 0003b960:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b | 0003b970:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b | 0003b980:·743d·2223·6964·6d38·3438·3122·2074·6162··t="#idm8481"·tab | ||
| 0003b | 0003b990:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b | 0003b9a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b | 0003b9b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b | 0003b9c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b | 0003b9d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b | 0003b9e0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0003b | 0003b9f0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003ba00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003ba10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003ba20:·6170·7365·2220·6964·3d22·6964·6d38·3438··apse"·id="idm848 | ||
| Max diff block lines reached; 22761117/22798819 bytes (99.83%) of diff not shown. | |||
| Offset 15187, 282 lines modified | Offset 15187, 282 lines modified | ||
| 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b590:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b5a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b5c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5d0:·2069·643d·2269·646d·3834·3830·223e·3c74···id="idm8480"><t | |||
| 0003b5e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b600:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b610:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b620:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b630:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b640:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b650:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b590:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b5a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5e0:·646d·3834·3830·223e·3c70·7265·3e3c·636f··dm8480"><pre><co | |||
| 0003b5f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b600:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b610:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b620:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b630:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b640:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b650:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b660:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b670:·6964·6d38·3438·3122·2074·6162·696e·6465··idm8481"·tabinde | |||
| 0003b680:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b690:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b6a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6d0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b6e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b700:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b710:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b720:·6d38·3438·3122·3e3c·7461·626c·6520·636c··m8481"><table·cl | |||
| 0003b730:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b740:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b750:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b760:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b770:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b660:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b790:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b670:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b680:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b690:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b7c0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7d0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7e0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7f0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b800:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b810:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b820:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b830:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b840:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b850:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b860:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b | 0003b6a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b6b0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b6c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b6d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b6e0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b6f0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b700:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b710:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b720:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b730:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b740:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b750:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b760:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b770:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b780:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b790:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b7c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b7d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b7e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b7f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b800:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b810:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b820:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b830:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b840:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b850:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b860:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b870:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b880:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b890:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b8a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b8b0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b8c0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b8d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b8e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b8f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b900:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b910:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b920:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b930:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b940:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b950:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b960:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b970:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b980:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | ||
| 0003b | 0003b990:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b9a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b9b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b9c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b9d0:·7267·6574·3d22·2369·646d·3834·3831·2220··rget="#idm8481"· | ||
| 0003b | 0003b9e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b9f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003ba00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003ba10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003ba20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003ba30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b | 0003ba40:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | ||
| 0003b | 0003ba50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| Max diff block lines reached; 23191146/23228710 bytes (99.84%) of diff not shown. | |||
| Offset 15177, 282 lines modified | Offset 15177, 282 lines modified | ||
| 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | ||
| 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4f0:·656d·6564·6961·7469·6f6e·204 | 0003b4f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b500:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b510:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b520:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b530:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b540:·646d·3834·3830·223e·3c74·6162·6c65·2063··dm8480"><table·c | |||
| 0003b550:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b560:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b570:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b580:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b590:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b5a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b5b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b500:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b510:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b520:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b530:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b540:·7073·6522·2069·643d·2269·646d·3834·3830··pse"·id="idm8480 | |||
| 0003b550:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b560:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b570:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b580:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b590:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b5a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b5c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5d0:·2d74·6172·6765·743d·2223·6964·6d38·3438··-target="#idm848 | |||
| 0003b5e0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b5f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b600:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b610:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b620:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b630:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b640:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b650:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b660:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b670:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b680:·7365·2220·6964·3d22·6964·6d38·3438·3122··se"·id="idm8481" | |||
| 0003b690:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b6b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b6c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b6d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b5c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b5d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b700:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b5e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b5f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b600:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b610:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b740:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b750:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b760:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b770:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b780:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b790:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b7a0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b7b0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b7c0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b7d0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b | 0003b620:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b630:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b640:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b650:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b660:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b670:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b680:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b6b0:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b6e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b6f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b700:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b710:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b720:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b730:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b740:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b750:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b760:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b770:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b780:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b790:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b7a0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b7b0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b7c0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b7d0:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b7e0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b7f0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b800:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b810:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b820:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b830:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b840:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b850:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b860:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b870:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b880:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b890:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b8a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b8b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b8c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b8d0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b8e0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b8f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b900:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b | 0003b910:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003b | 0003b920:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003b | 0003b930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b | 0003b940:·2369·646d·3834·3831·2220·7461·6269·6e64··#idm8481"·tabind | ||
| 0003b | 0003b950:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b | 0003b960:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b | 0003b970:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b980:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b990:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b | 0003b9a0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0003b | 0003b9b0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b | 0003b9c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003b9d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| Max diff block lines reached; 9916197/9953761 bytes (99.62%) of diff not shown. | |||
| Offset 135, 60 lines modified | Offset 135, 14 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····dnf·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 188 | ··package_facts: | 148 | ··package_facts: |
| Offset 226, 14 lines modified | Offset 180, 60 lines modified | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 231 | package·install·aide | 185 | package·install·aide |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·rpm·--quiet·-q·kernel;·then | ||
| 197 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 198 | ····dnf·install·-y·"aide" | ||
| 199 | fi | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | dnf·install·aide | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | include·install_aide | ||
| 215 | class·install_aide·{ | ||
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 225 | package·--add=aide | ||
| 232 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 233 | Run·the·following·command·to·generate·a·new·database: | 227 | Run·the·following·command·to·generate·a·new·database: |
| 234 | $·sudo·/usr/sbin/aide·--init | 228 | $·sudo·/usr/sbin/aide·--init |
| 235 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 229 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 236 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 230 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 237 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 231 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 238 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 232 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 28 lines modified | Offset 259, 14 lines modified | ||
| 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ············_\x8c_\x8i_\x8s············6.1.1 | 263 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1124954/1129837 bytes (99.57%) of diff not shown. | |||
| Offset 14856, 294 lines modified | Offset 14856, 294 lines modified | ||
| 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | ||
| 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003a0e0:·5265·6d65·6469·6174·696f·6e20·4 | 0003a0e0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003a0f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003a100:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a110:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a120:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a130:·6170·7365·2220·6964·3d22·6964·6d31·3236··apse"·id="idm126 | |||
| 0003a140:·3731·223e·3c70·7265·3e3c·636f·6465·3e0a··71"><pre><code>. | |||
| 0003a | 0003a0f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003a100:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a110:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a120:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a130:·6964·6d31·3236·3731·223e·3c74·6162·6c65··idm12671"><table | |||
| 0003a140:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a150:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a160:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a170:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a180:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a190:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a1a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a1b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a1c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a1d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a1e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a200:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a210:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003a220:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003a230:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003a240:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003a250:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003a260:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003a270:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003a280:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003a290:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003a2a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003a2b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003a2c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003a2d0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003a2e0:·0a20·202d·2070·6163·6b61·6765·5f64·6e66··.··-·package_dnf | |||
| 0003a2f0:·2d61·7574·6f6d·6174·6963·5f69·6e73·7461··-automatic_insta | |||
| 0003a300:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003a | 0003a310:·7375·7265·2064·6e66·2d61·7574·6f6d·6174··sure·dnf-automat | ||
| 0003a | 0003a320:·6963·2069·7320·696e·7374·616c·6c65·640a··ic·is·installed. | ||
| 0003a330:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003a340:·616d·653a·2064·6e66·2d61·7574·6f6d·6174··ame:·dnf-automat | |||
| 0003a350:·6963·0a20·2020·2073·7461·7465·3a20·7072··ic.····state:·pr | |||
| 0003a360:·6573·656e·740a·2020·7768·656e·3a20·6e6f··esent.··when:·no | |||
| 0003a370:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | |||
| 0003a380:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a390:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | |||
| 0003a3a0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | |||
| 0003a3b0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a3c0:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | |||
| 0003a3d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003a3e0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | |||
| 0003a3f0:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | |||
| 0003a400:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | |||
| 0003a410:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a420:·730a·2020·2020·290a·2020·7461·6773·3a0a··s.····).··tags:. | |||
| 0003a430:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a440:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a450:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a460:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a470:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a480:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a490:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a4a0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a4b0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003a4c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003a4d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003a4e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003a4f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003a500:·2d74·6172·6765·743d·2223·6964·6d31·3236··-target="#idm126 | |||
| 0003a510:·3732·2220·7461·6269·6e64·6578·3d22·3022··72"·tabindex="0" | |||
| 0003a520:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003a530:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003a540:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003a550:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003a560:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a570:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003a580:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a590:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a5a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a5b0:·2269·646d·3132·3637·3222·3e3c·7461·626c··"idm12672"><tabl | |||
| 0003a5c0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003a5d0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003a5e0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003a5f0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003a600:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a610:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a620:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a630:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003a640:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a650:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a660:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a670:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003a680:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003a690:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003a6a0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003a6b0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003a6c0:·616c·6c20·646e·662d·6175·746f·6d61·7469··all·dnf-automati | |||
| 0003a | 0003a6d0:·630a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··c.</code></pre>< | ||
| 0003a | 0003a6e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003a | 0003a6f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003a | 0003a700:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003a | 0003a710:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003a | 0003a720:·6574·3d22·2369·646d·3132·3637·3322·2074··et="#idm12673"·t | ||
| 0003a | 0003a730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a | 0003a740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a | 0003a750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a | 0003a760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a | 0003a770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a | 0003a780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a790:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003a7a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003a7b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a7c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a7d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a7e0:·646d·3132·3637·3322·3e3c·7072·653e·3c63··dm12673"><pre><c | |||
| 0003a7f0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| Max diff block lines reached; 3374686/3413906 bytes (98.85%) of diff not shown. | |||
| Offset 101, 31 lines modified | Offset 101, 57 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Gather·the·package·facts | ||
| 114 | ··package_facts: | ||
| 115 | ····manager:·auto | ||
| 116 | ··tags: | ||
| 117 | ··-·enable_strategy | ||
| 118 | ··-·low_complexity | ||
| 119 | ··-·low_disruption | ||
| 120 | ··-·medium_severity | ||
| 121 | ··-·no_reboot_needed | ||
| 122 | ··-·package_dnf-automatic_installed | ||
| 109 | 123 | -·name:·Ensure·dnf-automatic·is·installed | |
| 124 | ··package: | ||
| 110 | name | 125 | ····name:·dnf-automatic |
| 111 | 126 | ····state:·present | |
| 127 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 128 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 129 | ansible_facts.packages | ||
| 130 | ····) | ||
| 131 | ··tags: | ||
| 132 | ··-·enable_strategy | ||
| 133 | ··-·low_complexity | ||
| 134 | ··-·low_disruption | ||
| 135 | ··-·medium_severity | ||
| 136 | ··-·no_reboot_needed | ||
| 137 | ··-·package_dnf-automatic_installed | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_dnf-automatic | ||
| 118 | c | 143 | package·install·dnf-automatic |
| 119 | ··package·{·'dnf-automatic': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | 144 | _.R_.e_.m_.e_.d_.i_.a_.t_.i_.o_.n_.·_.O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_.·_.s_.n_.i_.p_.p_.e_.t_.·_.⇲ | |
| 145 | [[packages]] | ||
| 146 | name·=·"dnf-automatic" | ||
| 147 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 154 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 134, 66 lines modified | Offset 160, 40 lines modified | ||
| 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 160 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 135 | ····dnf·install·-y·"dnf-automatic" | 161 | ····dnf·install·-y·"dnf-automatic" |
| 136 | fi | 162 | fi |
| 137 | else | 163 | else |
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 139 | fi | 165 | fi |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | dnf·install·dnf-automatic | 171 | dnf·install·dnf-automatic |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_dnf-automatic | ||
| 157 | -·name:·Gather·the·package·facts | ||
| 158 | ··package_facts: | ||
| 159 | ····manager:·auto | ||
| 160 | ··tags: | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_dnf-automatic_installed | ||
| 178 | class·install_dnf-automatic·{ | ||
| 179 | ··package·{·'dnf-automatic': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 167 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 168 | ··package: | ||
| 169 | ····name:·dnf-automatic | ||
| 170 | ····state:·present | ||
| 171 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 172 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 173 | ansible_facts.packages | ||
| 174 | ····) | ||
| 175 | ··tags: | ||
| 176 | ··-·enable_strategy | ||
| 177 | ··-·low_complexity | ||
| 178 | ··-·low_disruption | ||
| 179 | ··-·medium_severity | ||
| 180 | ··-·no_reboot_needed | ||
| 181 | ··-·package_dnf-automatic_installed | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package· | 188 | package·--add=dnf-automatic |
| Max diff block lines reached; 247128/252068 bytes (98.04%) of diff not shown. | |||
| Offset 15233, 251 lines modified | Offset 15233, 251 lines modified | ||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b870:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b880:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b890:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8b0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8c0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8d0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8e0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b8f0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b900:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b910:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b920:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b930:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 0003b940:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b950:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b960:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b970:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b980:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b990:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9a0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9b0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9c0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9d0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9e0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003b9f0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba00:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba10:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba20:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba30:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba40:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba50:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba60:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba70:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba80:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003ba90:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003baa0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bab0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bac0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bad0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003bae0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003baf0:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb00:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb10:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb20:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb30:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb40:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb50:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb60:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb70:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb80:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bb90:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bba0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbe0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bbf0:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bca0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bcd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bce0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bcf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd50:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd70:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd80:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bd90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bda0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdb0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdc0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bdd0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bde0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003bdf0:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be00:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be10:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be20:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be30:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be40:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be50:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be60:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 0003be70:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 0003be80:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 0003be90:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 0003bea0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 0003beb0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 0003bec0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 0003bed0:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 0003bee0:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 0003bef0:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 0003bf00:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 0003bf10:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 0003bf20:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 0003bf30:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003bf40:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 0003bf50:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 0003bf60:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 0003bf70:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 0003bf80:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 0003bf90:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 0003bfa0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 0003bfb0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bfc0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bfd0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bfe0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| Max diff block lines reached; 13135190/13168476 bytes (99.75%) of diff not shown. | |||
| Offset 120, 58 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 172 | ··set_fact: | 133 | ··set_fact: |
| Offset 222, 14 lines modified | Offset 178, 58 lines modified | ||
| 222 | ··-·PCI-DSSv4-2.2.7 | 178 | ··-·PCI-DSSv4-2.2.7 |
| 223 | ··-·configure_crypto_policy | 179 | ··-·configure_crypto_policy |
| 224 | ··-·high_severity | 180 | ··-·high_severity |
| 225 | ··-·low_complexity | 181 | ··-·low_complexity |
| 226 | ··-·low_disruption | 182 | ··-·low_disruption |
| 227 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 228 | ··-·restrict_strategy | 184 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 232 | Severity: ··medium | 227 | Severity: ··medium |
| 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 19 lines modified | Offset 237, 14 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1179238/1184841 bytes (99.53%) of diff not shown. | |||
| Offset 15193, 251 lines modified | Offset 15193, 251 lines modified | ||
| 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b5f0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b600:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d39·3235·3022··se"·id="idm9250" | |||
| 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | |||
| 0003b650:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b660:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003b670:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b680:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b690:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b6a0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b6b0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b6c0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b6d0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003b6e0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003b6f0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003b700:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | |||
| 0003b710:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003b720:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | |||
| 0003b730:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 0003b740:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 0003b750:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 0003b760:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 0003b770:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 0003b780:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 0003b790:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 0003b7a0:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 0003b7b0:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 0003b7c0:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 0003b7d0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003b7e0:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 0003b7f0:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| 0003b800:·6573·2075·7064·6174·652d·6372·7970·746f··es·update-crypto | |||
| 0003b810:·2d70·6f6c·6963·6965·7327·2063·6f6d·6d61··-policies'·comma | |||
| 0003b820:·6e64·2220·2667·743b·2661·6d70·3b32·0a09··nd"·>&2.. | |||
| 0003b830:·6563·686f·2022·746f·2073·6565·2077·6861··echo·"to·see·wha | |||
| 0003b840:·7420·7061·636b·6167·6520·746f·2028·7265··t·package·to·(re | |||
| 0003b850:·2969·6e73·7461·6c6c·2220·2667·743b·2661··)install"·>&a | |||
| 0003b860:·6d70·3b32·0a0a·0966·616c·7365·2020·2320··mp;2...false··#· | |||
| 0003b870:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003b880:·7220·636f·6465·0a65·6c69·6620·7465·7374··r·code.elif·test | |||
| 0003b890:·2022·2472·6322·2021·3d20·303b·2074·6865···"$rc"·!=·0;·the | |||
| 0003b8a0:·6e0a·0965·6368·6f20·2245·7272·6f72·2069··n..echo·"Error·i | |||
| 0003b8b0:·6e76·6f6b·696e·6720·7468·6520·7570·6461··nvoking·the·upda | |||
| 0003b8c0:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 0003b8d0:·6573·2073·6372·6970·743a·2024·7374·6465··es·script:·$stde | |||
| 0003b8e0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003b8f0:·2661·6d70·3b32·0a09·6661·6c73·6520·2023··&2..false··# | |||
| 0003b900:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 0003b910:·6f72·2063·6f64·650a·6669·0a3c·2f63·6f64··or·code.fi.</cod | |||
| 0003b920:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b930:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b940:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b950:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b960:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b970:·6d39·3235·3222·2074·6162·696e·6465·783d··m9252"·tabindex= | |||
| 0003b980:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b990:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b9a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b9b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b9c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b9d0:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | |||
| 0003b9e0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0003b9f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ba20:·6964·6d39·3235·3222·3e3c·7461·626c·6520··idm9252"><table· | |||
| 0003ba30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ba40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ba50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ba60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ba70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003baa0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bab0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bac0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bad0:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | |||
| 0003bae0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003baf0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003bb00:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003bb10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb20:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 0003bb30:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 0003bb40:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 0003bb50:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 0003bb60:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 0003bb70:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 0003bb80:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 0003bb90:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 0003bba0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 0003bbb0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 0003bbc0:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 0003bbd0:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 0003bbe0:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003bbf0:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 0003bc00:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 0003bc10:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 0003bc20:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 0003bc30:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 0003bc40:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 0003bc50:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 0003bc60:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 0003bc70:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 0003bc80:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 0003bc90:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 0003bca0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 0003bcb0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bcc0:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 0003bcd0:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 0003bce0:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 0003bcf0:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 0003bd00:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 0003bd10:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 0003bd20:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 0003bd30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| Max diff block lines reached; 8973148/9006434 bytes (99.63%) of diff not shown. | |||
| Offset 112, 58 lines modified | Offset 112, 14 lines modified | ||
| 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 116 | ············_\x8c_\x8i_\x8s······1.6.1 | 116 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | var_system_crypto_policy='DEFAULT' | ||
| 121 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 122 | rc=$? | ||
| 123 | if·test·"$rc"·=·127;·then | ||
| 124 | » echo·"$stderr_of_call"·>&2 | ||
| 125 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 126 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 127 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 128 | » false··#·end·with·an·error·code | ||
| 129 | elif·test·"$rc"·!=·0;·then | ||
| 130 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 131 | » false··#·end·with·an·error·code | ||
| 132 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 138 | --- | ||
| 139 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 140 | kind:·MachineConfig | ||
| 141 | spec: | ||
| 142 | ··config: | ||
| 143 | ····ignition: | ||
| 144 | ······version:·3.1.0 | ||
| 145 | ····systemd: | ||
| 146 | ······units: | ||
| 147 | ········-·name:·configure-crypto-policy.service | ||
| 148 | ··········enabled:·true | ||
| 149 | ··········contents:·| | ||
| 150 | ············[Unit] | ||
| 151 | ············Before=kubelet.service | ||
| 152 | ············[Service] | ||
| 153 | ············Type=oneshot | ||
| 154 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 155 | ············RemainAfterExit=yes | ||
| 156 | ············[Install] | ||
| 157 | ············WantedBy=multi-user.target | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 163 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 124 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 164 | ··set_fact: | 125 | ··set_fact: |
| Offset 214, 14 lines modified | Offset 170, 58 lines modified | ||
| 214 | ··-·PCI-DSSv4-2.2.7 | 170 | ··-·PCI-DSSv4-2.2.7 |
| 215 | ··-·configure_crypto_policy | 171 | ··-·configure_crypto_policy |
| 216 | ··-·high_severity | 172 | ··-·high_severity |
| 217 | ··-·low_complexity | 173 | ··-·low_complexity |
| 218 | ··-·low_disruption | 174 | ··-·low_disruption |
| 219 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 220 | ··-·restrict_strategy | 176 | ··-·restrict_strategy |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 182 | --- | ||
| 183 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 184 | kind:·MachineConfig | ||
| 185 | spec: | ||
| 186 | ··config: | ||
| 187 | ····ignition: | ||
| 188 | ······version:·3.1.0 | ||
| 189 | ····systemd: | ||
| 190 | ······units: | ||
| 191 | ········-·name:·configure-crypto-policy.service | ||
| 192 | ··········enabled:·true | ||
| 193 | ··········contents:·| | ||
| 194 | ············[Unit] | ||
| 195 | ············Before=kubelet.service | ||
| 196 | ············[Service] | ||
| 197 | ············Type=oneshot | ||
| 198 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 199 | ············RemainAfterExit=yes | ||
| 200 | ············[Install] | ||
| 201 | ············WantedBy=multi-user.target | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | var_system_crypto_policy='DEFAULT' | ||
| 204 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 205 | rc=$? | ||
| 206 | if·test·"$rc"·=·127;·then | ||
| 207 | » echo·"$stderr_of_call"·>&2 | ||
| 208 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 209 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 210 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | elif·test·"$rc"·!=·0;·then | ||
| 213 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 214 | » false··#·end·with·an·error·code | ||
| 215 | fi | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 218 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 224 | Severity: ··medium | 219 | Severity: ··medium |
| 225 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 220 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 226 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 221 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 227 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 222 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 229, 19 lines modified | Offset 229, 14 lines modified | ||
| 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 233 | ············_\x8c_\x8i_\x8s······1.6.2 | 233 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 874758/880361 bytes (99.36%) of diff not shown. | |||
| Offset 15234, 251 lines modified | Offset 15234, 251 lines modified | ||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b880:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b890:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8d0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8e0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8f0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b900:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b910:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b920:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b930:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b940:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 0003b950:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b960:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b970:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b980:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b990:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b9a0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9b0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9c0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9d0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9e0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9f0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003ba00:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba10:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba20:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba30:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba40:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba50:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba60:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba70:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba80:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba90:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003baa0:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003bab0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bac0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bad0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bae0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003baf0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003bb00:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb10:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb20:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb30:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb40:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb50:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb60:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb70:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb80:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb90:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bba0:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bbb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbc0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbd0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbe0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bc00:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bca0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bcb0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bce0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bcf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bd00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd50:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd60:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd70:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd80:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd90:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bda0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bdb0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdc0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdd0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bde0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bdf0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003be00:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be10:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be20:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be30:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be40:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be50:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be60:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be70:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 0003be80:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 0003be90:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 0003bea0:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 0003beb0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 0003bec0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 0003bed0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 0003bee0:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 0003bef0:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 0003bf00:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 0003bf10:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 0003bf20:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 0003bf30:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 0003bf40:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003bf50:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 0003bf60:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 0003bf70:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 0003bf80:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 0003bf90:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 0003bfa0:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 0003bfb0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 0003bfc0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bfd0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bfe0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bff0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| Max diff block lines reached; 10277672/10310958 bytes (99.68%) of diff not shown. | |||
| Offset 120, 58 lines modified | Offset 120, 14 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 172 | ··set_fact: | 133 | ··set_fact: |
| Offset 222, 14 lines modified | Offset 178, 58 lines modified | ||
| 222 | ··-·PCI-DSSv4-2.2.7 | 178 | ··-·PCI-DSSv4-2.2.7 |
| 223 | ··-·configure_crypto_policy | 179 | ··-·configure_crypto_policy |
| 224 | ··-·high_severity | 180 | ··-·high_severity |
| 225 | ··-·low_complexity | 181 | ··-·low_complexity |
| 226 | ··-·low_disruption | 182 | ··-·low_disruption |
| 227 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 228 | ··-·restrict_strategy | 184 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 232 | Severity: ··medium | 227 | Severity: ··medium |
| 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 19 lines modified | Offset 237, 14 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1078390/1083993 bytes (99.48%) of diff not shown. | |||
| Offset 15238, 283 lines modified | Offset 15238, 283 lines modified | ||
| 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b8d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b8e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b8f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b900:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b910:·3d22·6964·6d38·3438·3022·3e3c·7461·626c··="idm8480"><tabl | |||
| 0003b920:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b930:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b940:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b950:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b960:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b970:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b980:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b990:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b8d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b8e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b8f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b900:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b910:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b920:·3438·3022·3e3c·7072·653e·3c63·6f64·653e··480"><pre><code> | |||
| 0003b930:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b940:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b950:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b960:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b970:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b980:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b990:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9b0:·3834·3831·2220·7461·6269·6e64·6578·3d22··8481"·tabindex=" | |||
| 0003b9c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b9d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b9e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b9f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba00:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba10:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ba20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba50:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003ba60:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003ba70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ba80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ba90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003baa0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bab0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b9a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bad0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b9b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b9c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b9d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b9e0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bb10:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bb20:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bb30:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bb40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b9f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ba00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba10:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba20:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba30:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba40:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba50:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ba60:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ba70:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003ba80:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003ba90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baa0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bab0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bac0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bad0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bae0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003baf0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb00:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb10:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb20:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb30:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb40:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bb50:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb60:· | 0003bb60:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | ||
| 0003bb70:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bb80:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bb90:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bba0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bb | 0003bb70:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | ||
| 0003bb80:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb90:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bba0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bbb0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bbc0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bbd0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003bbe0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bbf0:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003bc00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bc40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bc50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bc60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bc70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bc80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bc90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bca0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bcb0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003bcc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b | 0003bcd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003bce0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b | 0003bcf0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b | 0003bd00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b | 0003bd10:·743d·2223·6964·6d38·3438·3122·2074·6162··t="#idm8481"·tab | ||
| 0003b | 0003bd20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b | 0003bd30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b | 0003bd40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b | 0003bd50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b | 0003bd60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b | 0003bd70:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0003b | 0003bd80:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003bd90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003bda0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003bdb0:·6170·7365·2220·6964·3d22·6964·6d38·3438··apse"·id="idm848 | ||
| Max diff block lines reached; 26048500/26086202 bytes (99.86%) of diff not shown. | |||
| Offset 15200, 282 lines modified | Offset 15200, 282 lines modified | ||
| 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | ||
| 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b660:·6564·6961·7469·6f6e·204 | 0003b660:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b670:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b680:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b690:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b6a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b6b0:·3834·3830·223e·3c74·6162·6c65·2063·6c61··8480"><table·cla | |||
| 0003b6c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b6d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b6e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b6f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b700:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b710:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b720:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b670:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6b0:·6522·2069·643d·2269·646d·3834·3830·223e··e"·id="idm8480"> | |||
| 0003b6c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b6d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b6e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b6f0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b700:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b710:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b720:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b740:·6172·6765·743d·2223·6964·6d38·3438·3122··arget="#idm8481" | |||
| 0003b750:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b760:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b770:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b780:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b790:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b7a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b7b0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b7c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b7d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b7e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b7f0:·2220·6964·3d22·6964·6d38·3438·3122·3e3c··"·id="idm8481">< | |||
| 0003b800:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b810:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b820:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b830:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b840:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b730:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b740:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b870:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b880:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003b750:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b760:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b770:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b780:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b8b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b8c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b8d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b8e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b8f0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b900:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b910:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b920:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b930:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b940:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b | 0003b790:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b7a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b7b0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b7c0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b7d0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b7e0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b7f0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b800:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b810:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003b820:·392d·3635·3130·3130·0a20·202d·204e·4953··9-651010.··-·NIS | |||
| 0003b830:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b840:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b850:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b860:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b870:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b880:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b890:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b8a0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b8b0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b8c0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b8d0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b8e0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b8f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b900:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b910:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b920:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b930:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b940:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b950:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b960:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b970:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b980:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b990:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b9a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b9b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b9c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b9d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b9e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b9f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003ba00:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ba10:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ba20:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ba30:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ba40:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003ba50:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003ba60:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003ba70:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003ba80:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003ba90:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003baa0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b | 0003bab0:·646d·3834·3831·2220·7461·6269·6e64·6578··dm8481"·tabindex | ||
| 0003b | 0003bac0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b | 0003bad0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b | 0003bae0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b | 0003baf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b | 0003bb00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b | 0003bb10:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0003b | 0003bb20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003bb30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| Max diff block lines reached; 11607640/11645204 bytes (99.68%) of diff not shown. | |||
| Offset 122, 60 lines modified | Offset 122, 14 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 175 | ··package_facts: | 135 | ··package_facts: |
| Offset 213, 14 lines modified | Offset 167, 60 lines modified | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 218 | package·install·aide | 172 | package·install·aide |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 183 | if·rpm·--quiet·-q·kernel;·then | ||
| 184 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 185 | ····dnf·install·-y·"aide" | ||
| 186 | fi | ||
| 187 | else | ||
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 189 | fi | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | dnf·install·aide | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 201 | include·install_aide | ||
| 202 | class·install_aide·{ | ||
| 203 | ··package·{·'aide': | ||
| 204 | ····ensure·=>·'installed', | ||
| 205 | ··} | ||
| 206 | } | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | package·--add=aide | ||
| 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 220 | Run·the·following·command·to·generate·a·new·database: | 214 | Run·the·following·command·to·generate·a·new·database: |
| 221 | $·sudo·/usr/sbin/aide·--init | 215 | $·sudo·/usr/sbin/aide·--init |
| 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 223 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 224 | To·initiate·a·manual·check,·run·the·following·command: | 218 | To·initiate·a·manual·check,·run·the·following·command: |
| 225 | $·sudo·/usr/sbin/aide·--check | 219 | $·sudo·/usr/sbin/aide·--check |
| Offset 239, 28 lines modified | Offset 239, 14 lines modified | ||
| 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 243 | ············_\x8c_\x8i_\x8s············6.1.1 | 243 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1374114/1379146 bytes (99.64%) of diff not shown. | |||
| Offset 15191, 283 lines modified | Offset 15191, 283 lines modified | ||
| 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | ||
| 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b5d0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b5d0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b5e0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b5f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b600:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b5e0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b5f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b600:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b610:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b620:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b630:·3834·3830·223e·3c70·7265·3e3c·636f·6465··8480"><pre><code | |||
| 0003b640:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b650:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b660:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b670:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b680:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b690:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b6a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b6b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b6c0:·6d38·3438·3122·2074·6162·696e·6465·783d··m8481"·tabindex= | |||
| 0003b6d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b6e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b6f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b700:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b710:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b720:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b730:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b740:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b610:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b760:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b770:·3438·3122·3e3c·7461·626c·6520·636c·6173··481"><table·clas | |||
| 0003b780:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b790:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b7b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003b620:·643d·2269·646d·3834·3830·223e·3c74·6162··d="idm8480"><tab | ||
| 0003b630:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b640:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b650:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b660:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b670:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b680:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b6a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b6b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b7e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b6c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b6d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b6e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b810:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b820:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b830:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b840:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b850:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b6f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b700:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b710:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b720:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b730:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b740:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b750:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b760:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b770:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b780:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b790:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b7a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b7b0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b7c0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b7d0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b7e0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b7f0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b800:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b810:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b820:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b830:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b840:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b850:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b860:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b870:·6 | 0003b870:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | ||
| 0003b880:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b890:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b8a0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b8b0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b8 | 0003b880:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | ||
| 0003b890:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b8a0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b8b0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b8c0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b8d0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b8e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b8f0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b900:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b910:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b920:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b930:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b940:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b950:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b960:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b970:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b980:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b990:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b9a0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b9b0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b9c0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b9d0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | ||
| 0003b | 0003b9e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b9f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003ba00:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003ba10:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003ba20:·6574·3d22·2369·646d·3834·3831·2220·7461··et="#idm8481"·ta | ||
| 0003b | 0003ba30:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003ba40:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003ba50:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003ba60:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003ba70:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003ba80:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b | 0003ba90:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b | 0003baa0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003bab0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003bac0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | ||
| 0003b | 0003bad0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | ||
| Max diff block lines reached; 11220576/11258278 bytes (99.67%) of diff not shown. | |||
| Offset 121, 60 lines modified | Offset 121, 14 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·rpm·--quiet·-q·kernel;·then | ||
| 150 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 151 | ····dnf·install·-y·"aide" | ||
| 152 | fi | ||
| 153 | else | ||
| 154 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 155 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | dnf·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 174 | ··package_facts: | 134 | ··package_facts: |
| Offset 212, 14 lines modified | Offset 166, 60 lines modified | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package·install·aide | 171 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | Run·the·following·command·to·generate·a·new·database: | 213 | Run·the·following·command·to·generate·a·new·database: |
| 220 | $·sudo·/usr/sbin/aide·--init | 214 | $·sudo·/usr/sbin/aide·--init |
| 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 222 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 223 | To·initiate·a·manual·check,·run·the·following·command: | 217 | To·initiate·a·manual·check,·run·the·following·command: |
| 224 | $·sudo·/usr/sbin/aide·--check | 218 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 28 lines modified | Offset 238, 14 lines modified | ||
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ············_\x8c_\x8i_\x8s············6.1.1 | 242 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1317464/1322496 bytes (99.62%) of diff not shown. | |||
| Offset 15230, 282 lines modified | Offset 15230, 282 lines modified | ||
| 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | ||
| 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b840:·6469·6174·696f·6e20·4 | 0003b840:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b850:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b860:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b870:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b880:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b890:·3438·3022·3e3c·7461·626c·6520·636c·6173··480"><table·clas | |||
| 0003b8a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b8b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b8c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b8d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b8e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b8f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b900:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b850:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b860:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b870:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b880:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b890:·2220·6964·3d22·6964·6d38·3438·3022·3e3c··"·id="idm8480">< | |||
| 0003b8a0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b8b0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b8c0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b8d0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b8e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b900:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b910:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b920:·7267·6574·3d22·2369·646d·3834·3831·2220··rget="#idm8481"· | |||
| 0003b930:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b940:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b950:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b960:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b970:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b980:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b990:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b9d0:·2069·643d·2269·646d·3834·3831·223e·3c74···id="idm8481"><t | |||
| 0003b9e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b9f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ba00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ba10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ba20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b910:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003ba40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba50:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ba60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba70:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ba80:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003baa0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bab0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bac0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bad0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bae0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003baf0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003bb00:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003bb10:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003bb20:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b | 0003b930:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b940:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b950:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b960:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b970:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b980:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b990:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b9a0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b9b0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b9c0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b9d0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b9e0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b9f0:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003ba00:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003ba10:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003ba20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003ba30:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003ba40:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003ba50:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003ba60:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ba70:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ba80:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ba90:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003baa0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bab0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bac0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003bad0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bae0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003baf0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bb00:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bb10:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bb20:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bb30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bb40:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bb50:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bb60:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bb70:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003bb80:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb90:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bba0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bbb0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bbc0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bbd0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bbe0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003bbf0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003bc00:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003bc10:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003bc20:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bc30:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b | 0003bc40:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b | 0003bc50:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b | 0003bc60:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b | 0003bc70:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b | 0003bc80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b | 0003bc90:·6d38·3438·3122·2074·6162·696e·6465·783d··m8481"·tabindex= | ||
| 0003b | 0003bca0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b | 0003bcb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b | 0003bcc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b | 0003bcd0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b | 0003bce0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b | 0003bcf0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| Max diff block lines reached; 25842568/25880132 bytes (99.85%) of diff not shown. | |||
| Offset 15836, 251 lines modified | Offset 15836, 251 lines modified | ||
| 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | ||
| 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003de20:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003de30:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003de40:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003de50:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003de60:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003de70:·6964·6d39·3136·3322·3e3c·7072·653e·3c63··idm9163"><pre><c | |||
| 0003de80:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003de90:·5d0a·6e61·6d65·203d·2022·6372·7970·746f··].name·=·"crypto | |||
| 0003dea0:·2d70·6f6c·6963·6965·7322·0a76·6572·7369··-policies".versi | |||
| 0003de | 0003de20:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003de30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003de40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003de50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003de60:·2220·6964·3d22·6964·6d39·3136·3322·3e3c··"·id="idm9163">< | |||
| 0003de70:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003de80:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003de90:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003dea0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003deb0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003dec0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ded0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003dee0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003def0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003df00:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003df10:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003df20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003df30:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003df40:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003df50:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003df60:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003df70:·6e73·7572·6520·6372·7970·746f·2d70·6f6c··nsure·crypto-pol | |||
| 0003df80:·6963·6965·7320·6973·2069·6e73·7461·6c6c··icies·is·install | |||
| 0003df90:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003dfa0:·2020·6e61·6d65·3a20·6372·7970·746f·2d70····name:·crypto-p | |||
| 0003dfb0:·6f6c·6963·6965·730a·2020·2020·7374·6174··olicies.····stat | |||
| 0003dfc0:·653a·2070·7265·7365·6e74·0a20·2074·6167··e:·present.··tag | |||
| 0003dfd0:·733a·0a20·202d·2044·4953·412d·5354·4947··s:.··-·DISA-STIG | |||
| 0003dfe0:·2d52·4845·4c2d·3039·2d32·3135·3130·300a··-RHEL-09-215100. | |||
| 0003dff0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003e000:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003e010:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003e020:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003e030:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003e040:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003e050:·6564·0a20·202d·2070·6163·6b61·6765·5f63··ed.··-·package_c | |||
| 0003e060:·7279·7074·6f2d·706f·6c69·6369·6573·5f69··rypto-policies_i | |||
| 0003e070:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003 | 0003e080:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003 | 0003e090:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003 | 0003e0a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003 | 0003e0b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003 | 0003e0c0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003 | 0003e0d0:·3136·3422·2074·6162·696e·6465·783d·2230··164"·tabindex="0 | ||
| 0003 | 0003e0e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003 | 0003e0f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003 | 0003e100:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003 | 0003e110:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003 | 0003e120:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003e130:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003df70:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003df80:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003df90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003dfa0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003dfb0:·6170·7365·2220·6964·3d22·6964·6d39·3136··apse"·id="idm916 | |||
| 0003dfc0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003dfd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003dfe0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003dff0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003e000:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003e010:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003e020:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e030:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003e040:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e050:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003e060:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003e070:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003e080:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003e090:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003e0a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003e0b0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003e0c0:·6465·2069·6e73·7461·6c6c·5f63·7279·7074··de·install_crypt | |||
| 0003e0d0:·6f2d·706f·6c69·6369·6573·0a0a·636c·6173··o-policies..clas | |||
| 0003e0e0:·7320·696e·7374·616c·6c5f·6372·7970·746f··s·install_crypto | |||
| 0003e0f0:·2d70·6f6c·6963·6965·7320·7b0a·2020·7061··-policies·{.··pa | |||
| 0003e100:·636b·6167·6520·7b20·2763·7279·7074·6f2d··ckage·{·'crypto- | |||
| 0003e110:·706f·6c69·6369·6573·273a·0a20·2020·2065··policies':.····e | |||
| 0003e120:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003e130:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003e140:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003e150:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003e160:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003e170:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003e180:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003e190:·2223·6964·6d39·3136·3522·2074·6162·696e··"#idm9165"·tabin | |||
| 0003e1a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003e1b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003e1c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003e1d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003e1e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e1f0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e200:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e | 0003e140:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003e | 0003e150:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003e | 0003e160:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003e | 0003e170:·3d22·6964·6d39·3136·3422·3e3c·7461·626c··="idm9164"><tabl | ||
| 0003e | 0003e180:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003e26 | 0003e190:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003e | 0003e1a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003e | 0003e1b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003e | 0003e1c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003e | 0003e1d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003e | 0003e1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003e | 0003e1f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003e2d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e2e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e2f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e300:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e310:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003e320:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003e330:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| Max diff block lines reached; 6815661/6848947 bytes (99.51%) of diff not shown. | |||
| Offset 170, 78 lines modified | Offset 170, 78 lines modified | ||
| 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 171 | Severity: ··medium | 171 | Severity: ··medium |
| 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"crypto-policies" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_crypto-policies | ||
| 187 | class·install_crypto-policies·{ | ||
| 188 | ··package·{·'crypto-policies': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | 182 | -·name:·Ensure·crypto-policies·is·installed | |
| 183 | ··package: | ||
| 184 | ····name:·crypto-policies | ||
| 185 | ····state:·present | ||
| 186 | ··tags: | ||
| 187 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 188 | ··-·enable_strategy | ||
| 189 | ··-·low_complexity | ||
| 190 | ··-·low_disruption | ||
| 191 | ··-·medium_severity | ||
| 192 | ··-·no_reboot_needed | ||
| 193 | ··-·package_crypto-policies_installed | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 198 | ····dnf·install·-y·"crypto-policies" | ||
| 199 | 199 | package·install·crypto-policies | |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | [[packages]] | ||
| 202 | name·=·"crypto-policies" | ||
| 203 | version·=·"*" | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | 209 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 210 | ····dnf·install·-y·"crypto-policies" | ||
| 211 | fi | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 211 | dnf·install·crypto-policies | 217 | dnf·install·crypto-policies |
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | include·install_crypto-policies | ||
| 224 | class·install_crypto-policies·{ | ||
| 225 | ··package·{·'crypto-policies': | ||
| 226 | ····ensure·=>·'installed', | ||
| 227 | ··} | ||
| 228 | } | ||
| 217 | -·name:·Ensure·crypto-policies·is·installed | ||
| 218 | ··package: | ||
| 219 | ····name:·crypto-policies | ||
| 220 | ····state:·present | ||
| 221 | ··tags: | ||
| 222 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 223 | ··-·enable_strategy | ||
| 224 | ··-·low_complexity | ||
| 225 | ··-·low_disruption | ||
| 226 | ··-·medium_severity | ||
| 227 | ··-·no_reboot_needed | ||
| 228 | ··-·package_crypto-policies_installed | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 234 | package· | 234 | package·--add=crypto-policies |
| 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 237 | $·sudo·update-crypto-policies·--set·FIPS | 237 | $·sudo·update-crypto-policies·--set·FIPS |
| 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 253, 58 lines modified | Offset 253, 14 lines modified | ||
| 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 257 | ············_\x8c_\x8i_\x8s······1.6.1 | 257 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 261 | var_system_crypto_policy='FIPS' | ||
| 262 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 263 | rc=$? | ||
| 264 | if·test·"$rc"·=·127;·then | ||
| 265 | » echo·"$stderr_of_call"·>&2 | ||
| 266 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 267 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 268 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 269 | » false··#·end·with·an·error·code | ||
| 270 | elif·test·"$rc"·!=·0;·then | ||
| Max diff block lines reached; 921876/930411 bytes (99.08%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003ba90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003baa0:·6c6 | 0003baa0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003bab0:·3e3c | 0003bab0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003bac0:·2270 | 0003bac0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003bad0:·6 | 0003bad0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003bae0:·6d38 | 0003bae0:·2269·646d·3831·3431·223e·3c74·6162·6c65··"idm8141"><table | ||
| 0003baf0:· | 0003baf0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003bb00:·6 | 0003bb00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003bb10:·6 | 0003bb10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003bb20:· | 0003bb20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003bb30:· | 0003bb30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003bb40:· | 0003bb40:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003bb50:· | 0003bb50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003bb60:· | 0003bb60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003bb70:· | 0003bb70:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003bb80:· | 0003bb80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003bb90:· | 0003bb90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bba0:· | 0003bba0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bbb0:· | 0003bbb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003bbc0:· | 0003bbc0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003bbd0:· | 0003bbd0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003bbe0:·6 | 0003bbe0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003bbf0:· | 0003bbf0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003bc00:· | 0003bc00:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003bc10:·6 | 0003bc10:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003bc20:· | 0003bc20:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003bc30:·6 | 0003bc30:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003bc40:· | 0003bc40:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003bc50:· | 0003bc50:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003bc60:· | 0003bc60:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003bc70:· | 0003bc70:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bc80:·2 | 0003bc80:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003bc90:· | 0003bc90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bca0:· | 0003bca0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003bcb0:·2 | 0003bcb0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bcc0:· | 0003bcc0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bcd0:· | 0003bcd0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bce0:· | 0003bce0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003bcf0:· | 0003bcf0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003bd00:· | 0003bd00:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bd10:·2 | 0003bd10:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bd20:· | 0003bd20:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bd30:·6 | 0003bd30:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bd40:· | 0003bd40:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bd50:· | 0003bd50:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bd60:· | 0003bd60:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bd70:·6 | 0003bd70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bd80:·7 | 0003bd80:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bd90:· | 0003bd90:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bda0:· | 0003bda0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bdb0:· | 0003bdb0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003bdc0:·6 | 0003bdc0:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003bdd0:· | 0003bdd0:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003bde0:· | 0003bde0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003bdf0:·6 | 0003bdf0:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003be00:· | 0003be00:·6569·6e73·7461·6c6c·5f63·6d64·3a20·646e··einstall_cmd:·dn | ||
| 0003be10:·6 | 0003be10:·6620·7265·696e·7374·616c·6c20·2d79·0a20··f·reinstall·-y.· | ||
| 0003be20:· | 0003be20:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003be30:· | 0003be30:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003be40:· | 0003be40:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003be50:· | 0003be50:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003be60:·7 | 0003be60:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003be70:· | 0003be70:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003be80:· | 0003be80:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003be90:· | 0003be90:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bea0:· | 0003bea0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003beb0:· | 0003beb0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003bec0:· | 0003bec0:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003bed0:· | 0003bed0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bee0:· | 0003bee0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003bef0:· | 0003bef0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003bf00:· | 0003bf00:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003bf10:· | 0003bf10:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003bf20:· | 0003bf20:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003bf30:· | 0003bf30:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003bf40:· | 0003bf40:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003bf50:· | 0003bf50:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bf60:· | 0003bf60:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bf70:·3 | 0003bf70:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bf80:· | 0003bf80:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bf90:· | 0003bf90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bfa0:· | 0003bfa0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bfb0:· | 0003bfb0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bfc0:· | 0003bfc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bfd0:· | 0003bfd0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bfe0:·3 | 0003bfe0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bff0:· | 0003bff0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c000:· | 0003c000:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c010:· | 0003c010:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c020:· | 0003c020:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c030:·20 | 0003c030:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c040:·6 | 0003c040:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c050:·6 | 0003c050:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c060:· | 0003c060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c070:·6 | 0003c070:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c080:· | 0003c080:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c090:· | 0003c090:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c0a0:· | 0003c0a0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c0b0:· | 0003c0b0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003c0c0:· | 0003c0c0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003c0d0:·20 | 0003c0d0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003c0e0:· | 0003c0e0:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003c0f0:· | 0003c0f0:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003c100:· | 0003c100:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003c110:· | 0003c110:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003c120:· | 0003c120:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003c130:· | 0003c130:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003c140:· | 0003c140:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003c150:· | 0003c150:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c160:· | 0003c160:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003c170:· | 0003c170:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c180:· | 0003c180:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c190:· | 0003c190:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003c1a0:· | 0003c1a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c1b0:·6 | 0003c1b0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003c1c0:· | 0003c1c0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003c1d0:· | 0003c1d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c1e0:·7 | 0003c1e0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c1f0:· | 0003c1f0:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 6800676/6855628 bytes (99.20%) of diff not shown. | |||
| Offset 121, 33 lines modified | Offset 121, 14 lines modified | ||
| 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 134 | ··package_facts: |
| Offset 314, 14 lines modified | Offset 295, 33 lines modified | ||
| 314 | ··-·PCI-DSSv4-11.5.2 | 295 | ··-·PCI-DSSv4-11.5.2 |
| 315 | ··-·high_complexity | 296 | ··-·high_complexity |
| 316 | ··-·high_severity | 297 | ··-·high_severity |
| 317 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 318 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 319 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 320 | ··-·rpm_verify_hashes | 301 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 324 | run·the·following·command·to·determine·which·package·owns·it: | 318 | run·the·following·command·to·determine·which·package·owns·it: |
| 325 | $·rpm·-qf·FILENAME | 319 | $·rpm·-qf·FILENAME |
| 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 327 | $·sudo·rpm·--restore·PACKAGENAME | 321 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 340, 46 lines modified | Offset 340, 14 lines modified | ||
| 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 362 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | done | ||
| 365 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 366 | #·correct·values | ||
| 367 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 368 | do | ||
| 369 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 370 | done | ||
| 371 | else | ||
| 372 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 373 | fi | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 379 | -·name:·Gather·the·package·facts | 352 | -·name:·Gather·the·package·facts |
| 380 | ··package_facts: | 353 | ··package_facts: |
| Offset 487, 14 lines modified | Offset 455, 46 lines modified | ||
| 487 | ··-·PCI-DSSv4-11.5.2 | 455 | ··-·PCI-DSSv4-11.5.2 |
| 488 | ··-·high_complexity | 456 | ··-·high_complexity |
| 489 | ··-·high_severity | 457 | ··-·high_severity |
| 490 | ··-·medium_disruption | 458 | ··-·medium_disruption |
| 491 | ··-·no_reboot_needed | 459 | ··-·no_reboot_needed |
| 492 | ··-·restrict_strategy | 460 | ··-·restrict_strategy |
| 493 | ··-·rpm_verify_ownership | 461 | ··-·rpm_verify_ownership |
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 737876/745587 bytes (98.97%) of diff not shown. | |||
| Offset 15288, 408 lines modified | Offset 15288, 408 lines modified | ||
| 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003bbf0:·6c6 | 0003bbf0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003bc00:·3e3c | 0003bc00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003bc10:·2270 | 0003bc10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003bc20:·6 | 0003bc20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003bc30:·6d38 | 0003bc30:·2269·646d·3831·3431·223e·3c74·6162·6c65··"idm8141"><table | ||
| 0003bc40:· | 0003bc40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003bc50:·6 | 0003bc50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003bc60:·6 | 0003bc60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003bc70:· | 0003bc70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003bc80:· | 0003bc80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003bc90:· | 0003bc90:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003bca0:· | 0003bca0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003bcb0:· | 0003bcb0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003bcc0:· | 0003bcc0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003bcd0:· | 0003bcd0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003bce0:· | 0003bce0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bcf0:· | 0003bcf0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bd00:· | 0003bd00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003bd10:· | 0003bd10:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003bd20:· | 0003bd20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003bd30:·6 | 0003bd30:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003bd40:· | 0003bd40:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003bd50:· | 0003bd50:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003bd60:·6 | 0003bd60:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003bd70:· | 0003bd70:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003bd80:·6 | 0003bd80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003bd90:· | 0003bd90:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003bda0:· | 0003bda0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003bdb0:· | 0003bdb0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003bdc0:· | 0003bdc0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bdd0:·2 | 0003bdd0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003bde0:· | 0003bde0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bdf0:· | 0003bdf0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003be00:·2 | 0003be00:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003be10:· | 0003be10:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003be20:· | 0003be20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003be30:· | 0003be30:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003be40:· | 0003be40:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003be50:· | 0003be50:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003be60:·2 | 0003be60:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003be70:· | 0003be70:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003be80:·6 | 0003be80:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003be90:· | 0003be90:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bea0:· | 0003bea0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003beb0:· | 0003beb0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bec0:·6 | 0003bec0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bed0:·7 | 0003bed0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bee0:· | 0003bee0:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bef0:· | 0003bef0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bf00:· | 0003bf00:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003bf10:·6 | 0003bf10:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003bf20:· | 0003bf20:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003bf30:· | 0003bf30:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003bf40:·6 | 0003bf40:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003bf50:· | 0003bf50:·6569·6e73·7461·6c6c·5f63·6d64·3a20·646e··einstall_cmd:·dn | ||
| 0003bf60:·6 | 0003bf60:·6620·7265·696e·7374·616c·6c20·2d79·0a20··f·reinstall·-y.· | ||
| 0003bf70:· | 0003bf70:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003bf80:· | 0003bf80:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003bf90:· | 0003bf90:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bfa0:· | 0003bfa0:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003bfb0:·7 | 0003bfb0:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003bfc0:· | 0003bfc0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bfd0:· | 0003bfd0:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003bfe0:· | 0003bfe0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bff0:· | 0003bff0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003c000:· | 0003c000:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003c010:· | 0003c010:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003c020:· | 0003c020:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003c030:· | 0003c030:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003c040:· | 0003c040:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003c050:· | 0003c050:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003c060:· | 0003c060:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003c070:· | 0003c070:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003c080:· | 0003c080:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c090:· | 0003c090:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c0a0:· | 0003c0a0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c0b0:· | 0003c0b0:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c0c0:·3 | 0003c0c0:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c0d0:· | 0003c0d0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c0e0:· | 0003c0e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c0f0:· | 0003c0f0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c100:· | 0003c100:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c110:· | 0003c110:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c120:· | 0003c120:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c130:·3 | 0003c130:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c140:· | 0003c140:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c150:· | 0003c150:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c160:· | 0003c160:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c170:· | 0003c170:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c180:·20 | 0003c180:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c190:·6 | 0003c190:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c1a0:·6 | 0003c1a0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c1b0:· | 0003c1b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c1c0:·6 | 0003c1c0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c1d0:· | 0003c1d0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c1e0:· | 0003c1e0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c1f0:· | 0003c1f0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c200:· | 0003c200:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003c210:· | 0003c210:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003c220:·20 | 0003c220:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003c230:· | 0003c230:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003c240:· | 0003c240:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003c250:· | 0003c250:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003c260:· | 0003c260:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003c270:· | 0003c270:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003c280:· | 0003c280:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003c290:· | 0003c290:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003c2a0:· | 0003c2a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c2b0:· | 0003c2b0:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003c2c0:· | 0003c2c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c2d0:· | 0003c2d0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c2e0:· | 0003c2e0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003c2f0:· | 0003c2f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c300:·6 | 0003c300:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003c310:· | 0003c310:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003c320:· | 0003c320:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003c330:·7 | 0003c330:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003c340:· | 0003c340:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 17291443/17346395 bytes (99.68%) of diff not shown. | |||
| Offset 126, 33 lines modified | Offset 126, 14 lines modified | ||
| 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·Gather·the·package·facts | 138 | -·name:·Gather·the·package·facts |
| 152 | ··package_facts: | 139 | ··package_facts: |
| Offset 319, 14 lines modified | Offset 300, 33 lines modified | ||
| 319 | ··-·PCI-DSSv4-11.5.2 | 300 | ··-·PCI-DSSv4-11.5.2 |
| 320 | ··-·high_complexity | 301 | ··-·high_complexity |
| 321 | ··-·high_severity | 302 | ··-·high_severity |
| 322 | ··-·medium_disruption | 303 | ··-·medium_disruption |
| 323 | ··-·no_reboot_needed | 304 | ··-·no_reboot_needed |
| 324 | ··-·restrict_strategy | 305 | ··-·restrict_strategy |
| 325 | ··-·rpm_verify_hashes | 306 | ··-·rpm_verify_hashes |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 309 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 310 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 311 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 312 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 313 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 314 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 315 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 316 | fi | ||
| 317 | else | ||
| 318 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 319 | fi | ||
| 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 320 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 327 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 321 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 328 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 322 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 329 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 323 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 330 | $·rpm·-qf·FILENAME | 324 | $·rpm·-qf·FILENAME |
| 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 325 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 347, 50 lines modified | Offset 347, 14 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 369 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 370 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 371 | ········do | ||
| 372 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 373 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 374 | ········done | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 390 | -·name:·Gather·the·package·facts | 359 | -·name:·Gather·the·package·facts |
| 391 | ··package_facts: | 360 | ··package_facts: |
| Offset 502, 14 lines modified | Offset 466, 50 lines modified | ||
| 502 | ··-·PCI-DSSv4-11.5.2 | 466 | ··-·PCI-DSSv4-11.5.2 |
| 503 | ··-·high_complexity | 467 | ··-·high_complexity |
| 504 | ··-·high_severity | 468 | ··-·high_severity |
| 505 | ··-·medium_disruption | 469 | ··-·medium_disruption |
| 506 | ··-·no_reboot_needed | 470 | ··-·no_reboot_needed |
| 507 | ··-·restrict_strategy | 471 | ··-·restrict_strategy |
| 508 | ··-·rpm_verify_permissions | 472 | ··-·rpm_verify_permissions |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1340159/1348243 bytes (99.40%) of diff not shown. | |||
| Offset 15302, 408 lines modified | Offset 15302, 408 lines modified | ||
| 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | ||
| 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bcc0:·6e20· | 0003bcc0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003bcd0:·87b2 | 0003bcd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003bce0:·6c61 | 0003bce0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003bcf0:·6 | 0003bcf0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bd00:·643d | 0003bd00:·2220·6964·3d22·6964·6d38·3134·3122·3e3c··"·id="idm8141">< | ||
| 0003bd10:· | 0003bd10:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003bd20:· | 0003bd20:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bd30:· | 0003bd30:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bd40:· | 0003bd40:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bd50:· | 0003bd50:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bd60:· | 0003bd60:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003bd70:·6 | 0003bd70:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003bd80:· | 0003bd80:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bd90:·7 | 0003bd90:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003bda0:·6 | 0003bda0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bdb0:· | 0003bdb0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bdc0:·6 | 0003bdc0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bdd0:· | 0003bdd0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bde0:· | 0003bde0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003bdf0:· | 0003bdf0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003be00:· | 0003be00:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003be10:·6 | 0003be10:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003be20:· | 0003be20:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003be30:· | 0003be30:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003be40:· | 0003be40:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003be50:· | 0003be50:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003be60:· | 0003be60:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003be70:· | 0003be70:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003be80:· | 0003be80:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003be90:·2 | 0003be90:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bea0:· | 0003bea0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003beb0:· | 0003beb0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bec0:· | 0003bec0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bed0:·5 | 0003bed0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bee0:· | 0003bee0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bef0:·2 | 0003bef0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bf00:· | 0003bf00:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bf10:·2 | 0003bf10:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bf20:· | 0003bf20:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bf30:· | 0003bf30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bf40:· | 0003bf40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bf50:· | 0003bf50:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bf60:· | 0003bf60:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bf70:· | 0003bf70:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bf80:· | 0003bf80:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bf90:· | 0003bf90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bfa0:· | 0003bfa0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bfb0:· | 0003bfb0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bfc0:· | 0003bfc0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003bfd0:·6 | 0003bfd0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003bfe0:· | 0003bfe0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003bff0:·20 | 0003bff0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003c000:· | 0003c000:·6e64·270a·2020·7365·745f·6661·6374·3a0a··nd'.··set_fact:. | ||
| 0003c010:·2 | 0003c010:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003c020:·6 | 0003c020:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003c030:·6 | 0003c030:·643a·2064·6e66·2072·6569·6e73·7461·6c6c··d:·dnf·reinstall | ||
| 0003c040:·2 | 0003c040:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003c050:·6 | 0003c050:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003c060:· | 0003c060:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c070:·7 | 0003c070:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003c080:·6 | 0003c080:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003c090:·6 | 0003c090:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c0a0:· | 0003c0a0:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003c0b0:· | 0003c0b0:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003c0c0:· | 0003c0c0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003c0d0:· | 0003c0d0:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003c0e0:· | 0003c0e0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003c0f0:·6 | 0003c0f0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c100:·6 | 0003c100:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003c110:· | 0003c110:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003c120:·6 | 0003c120:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003c130:· | 0003c130:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003c140:· | 0003c140:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003c150:· | 0003c150:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003c160:· | 0003c160:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003c170:· | 0003c170:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003c180:·2 | 0003c180:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003c190:· | 0003c190:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003c1a0:· | 0003c1a0:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003c1b0:· | 0003c1b0:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003c1c0:·3 | 0003c1c0:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003c1d0:·2 | 0003c1d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c1e0:· | 0003c1e0:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003c1f0:· | 0003c1f0:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003c200:· | 0003c200:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003c210:· | 0003c210:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003c220:·3 | 0003c220:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c230:· | 0003c230:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c240:· | 0003c240:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c250:· | 0003c250:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c260:· | 0003c260:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c270:· | 0003c270:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c280:· | 0003c280:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c290:· | 0003c290:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c2a0:· | 0003c2a0:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003c2b0:· | 0003c2b0:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003c2c0:· | 0003c2c0:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003c2d0:· | 0003c2d0:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003c2e0:· | 0003c2e0:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003c2f0:· | 0003c2f0:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003c300:· | 0003c300:·636f·6d6d·616e·6420·287a·7970·7065·7229··command·(zypper) | ||
| 0003c310:· | 0003c310:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003c320:·2 | 0003c320:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003c330:· | 0003c330:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003c340:· | 0003c340:·207a·7970·7065·7220·696e·202d·6620·2d79···zypper·in·-f·-y | ||
| 0003c350:· | 0003c350:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003c360:· | 0003c360:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003c370:· | 0003c370:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c380:· | 0003c380:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003c390:· | 0003c390:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003c3a0:· | 0003c3a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c3b0:· | 0003c3b0:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003c3c0:· | 0003c3c0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c3d0:· | 0003c3d0:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003c3e0:·6 | 0003c3e0:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| 0003c3f0:· | 0003c3f0:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | ||
| 0003c400:· | 0003c400:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c410:·20 | 0003c410:·0a20·2020·2029·0a20·202d·2061·6e73·6962··.····).··-·ansib | ||
| 0003c420:· | 0003c420:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| Max diff block lines reached; 10128374/10183326 bytes (99.46%) of diff not shown. | |||
| Offset 128, 33 lines modified | Offset 128, 14 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 138 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 139 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 140 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 141 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 142 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 143 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 153 | -·name:·Gather·the·package·facts | 140 | -·name:·Gather·the·package·facts |
| 154 | ··package_facts: | 141 | ··package_facts: |
| Offset 321, 14 lines modified | Offset 302, 33 lines modified | ||
| 321 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 322 | ··-·high_complexity | 303 | ··-·high_complexity |
| 323 | ··-·high_severity | 304 | ··-·high_severity |
| 324 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 325 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 326 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 327 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 331 | run·the·following·command·to·determine·which·package·owns·it: | 325 | run·the·following·command·to·determine·which·package·owns·it: |
| 332 | $·rpm·-qf·FILENAME | 326 | $·rpm·-qf·FILENAME |
| 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 334 | $·sudo·rpm·--restore·PACKAGENAME | 328 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 347, 46 lines modified | Offset 347, 14 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 369 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 370 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 371 | done | ||
| 372 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 373 | #·correct·values | ||
| 374 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 375 | do | ||
| 376 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 377 | done | ||
| 378 | else | ||
| 379 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 380 | fi | ||
| 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 386 | -·name:·Gather·the·package·facts | 359 | -·name:·Gather·the·package·facts |
| 387 | ··package_facts: | 360 | ··package_facts: |
| Offset 494, 14 lines modified | Offset 462, 46 lines modified | ||
| 494 | ··-·PCI-DSSv4-11.5.2 | 462 | ··-·PCI-DSSv4-11.5.2 |
| 495 | ··-·high_complexity | 463 | ··-·high_complexity |
| 496 | ··-·high_severity | 464 | ··-·high_severity |
| 497 | ··-·medium_disruption | 465 | ··-·medium_disruption |
| 498 | ··-·no_reboot_needed | 466 | ··-·no_reboot_needed |
| 499 | ··-·restrict_strategy | 467 | ··-·restrict_strategy |
| 500 | ··-·rpm_verify_ownership | 468 | ··-·rpm_verify_ownership |
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1043384/1051095 bytes (99.27%) of diff not shown. | |||
| Offset 15804, 251 lines modified | Offset 15804, 251 lines modified | ||
| 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | ||
| 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003dc20:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003dc30:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003dc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003dc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003dc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003dc70:·2269·646d·3931·3633·223e·3c70·7265·3e3c··"idm9163"><pre>< | |||
| 0003dc80:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003dc90:·5d5d·0a6e·616d·6520·3d20·2263·7279·7074··]].name·=·"crypt | |||
| 0003dca0:·6f2d·706f·6c69·6369·6573·220a·7665·7273··o-policies".vers | |||
| 0003dc | 0003dc20:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003dc30:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003dc40:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003dc50:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003dc60:·6522·2069·643d·2269·646d·3931·3633·223e··e"·id="idm9163"> | |||
| 0003dc70:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003dc80:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003dc90:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003dca0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003dcb0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003dcc0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003dcd0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003dce0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003dcf0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003dd00:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003dd10:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003dd20:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003dd30:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003dd40:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003dd50:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003dd60:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003dd70:·456e·7375·7265·2063·7279·7074·6f2d·706f··Ensure·crypto-po | |||
| 0003dd80:·6c69·6369·6573·2069·7320·696e·7374·616c··licies·is·instal | |||
| 0003dd90:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003dda0:·2020·206e·616d·653a·2063·7279·7074·6f2d·····name:·crypto- | |||
| 0003ddb0:·706f·6c69·6369·6573·0a20·2020·2073·7461··policies.····sta | |||
| 0003ddc0:·7465·3a20·7072·6573·656e·740a·2020·7461··te:·present.··ta | |||
| 0003ddd0:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003dde0:·472d·5248·454c·2d30·392d·3231·3531·3030··G-RHEL-09-215100 | |||
| 0003ddf0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003de00:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003de10:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003de20:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003de30:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003de40:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003de50:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003de60:·6372·7970·746f·2d70·6f6c·6963·6965·735f··crypto-policies_ | |||
| 0003de70:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003d | 0003de80:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003d | 0003de90:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003d | 0003dea0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003d | 0003deb0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003d | 0003dec0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003d | 0003ded0:·3931·3634·2220·7461·6269·6e64·6578·3d22··9164"·tabindex=" | ||
| 0003d | 0003dee0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003d | 0003def0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003d | 0003df00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003d | 0003df10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003d | 0003df20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003dd70:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003dd80:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003dd90:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003dda0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ddb0:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003ddc0:·3634·223e·3c74·6162·6c65·2063·6c61·7373··64"><table·class | |||
| 0003ddd0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003dde0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ddf0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003de00:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003de10:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003de20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003de30:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003de40:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003de50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003d | 0003df30:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0003df40:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003df50:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003df60:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003df70:·643d·2269·646d·3931·3634·223e·3c74·6162··d="idm9164"><tab | |||
| 0003df80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003df90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003dfa0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003dfb0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003dfc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003dfd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003dfe0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003dff0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e000:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e010:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e020:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e030:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e040:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003 | 0003e050:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003de80:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003de90:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003dea0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003deb0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003dec0:·7564·6520·696e·7374·616c·6c5f·6372·7970··ude·install_cryp | |||
| 0003ded0:·746f·2d70·6f6c·6963·6965·730a·0a63·6c61··to-policies..cla | |||
| 0003dee0:·7373·2069·6e73·7461·6c6c·5f63·7279·7074··ss·install_crypt | |||
| 0003def0:·6f2d·706f·6c69·6369·6573·207b·0a20·2070··o-policies·{.··p | |||
| 0003df00:·6163·6b61·6765·207b·2027·6372·7970·746f··ackage·{·'crypto | |||
| 0003df10:·2d70·6f6c·6963·6965·7327·3a0a·2020·2020··-policies':.···· | |||
| 0003df20:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003df30:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003df40:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003df50:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003df60:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003df70:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003df80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003df90:·3d22·2369·646d·3931·3635·2220·7461·6269··="#idm9165"·tabi | |||
| 0003dfa0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003dfb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003dfc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003dfd0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003dfe0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003dff0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003e000:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003e010:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003e020:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003e030:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| Max diff block lines reached; 6814624/6847910 bytes (99.51%) of diff not shown. | |||
| Offset 161, 78 lines modified | Offset 161, 78 lines modified | ||
| 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 162 | Severity: ··medium | 162 | Severity: ··medium |
| 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"crypto-policies" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_crypto-policies | ||
| 178 | class·install_crypto-policies·{ | ||
| 179 | ··package·{·'crypto-policies': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | 173 | -·name:·Ensure·crypto-policies·is·installed | |
| 174 | ··package: | ||
| 175 | ····name:·crypto-policies | ||
| 176 | ····state:·present | ||
| 177 | ··tags: | ||
| 178 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 179 | ··-·enable_strategy | ||
| 180 | ··-·low_complexity | ||
| 181 | ··-·low_disruption | ||
| 182 | ··-·medium_severity | ||
| 183 | ··-·no_reboot_needed | ||
| 184 | ··-·package_crypto-policies_installed | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 189 | ····dnf·install·-y·"crypto-policies" | ||
| 190 | 190 | package·install·crypto-policies | |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | [[packages]] | ||
| 193 | name·=·"crypto-policies" | ||
| 194 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | 200 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 201 | ····dnf·install·-y·"crypto-policies" | ||
| 202 | fi | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | dnf·install·crypto-policies | 208 | dnf·install·crypto-policies |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | include·install_crypto-policies | ||
| 215 | class·install_crypto-policies·{ | ||
| 216 | ··package·{·'crypto-policies': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 208 | -·name:·Ensure·crypto-policies·is·installed | ||
| 209 | ··package: | ||
| 210 | ····name:·crypto-policies | ||
| 211 | ····state:·present | ||
| 212 | ··tags: | ||
| 213 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 214 | ··-·enable_strategy | ||
| 215 | ··-·low_complexity | ||
| 216 | ··-·low_disruption | ||
| 217 | ··-·medium_severity | ||
| 218 | ··-·no_reboot_needed | ||
| 219 | ··-·package_crypto-policies_installed | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 225 | package· | 225 | package·--add=crypto-policies |
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 244, 58 lines modified | Offset 244, 14 lines modified | ||
| 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 248 | ············_\x8c_\x8i_\x8s······1.6.1 | 248 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 252 | var_system_crypto_policy='FIPS:OSPP' | ||
| 253 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 254 | rc=$? | ||
| 255 | if·test·"$rc"·=·127;·then | ||
| 256 | » echo·"$stderr_of_call"·>&2 | ||
| 257 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 258 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 259 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 260 | » false··#·end·with·an·error·code | ||
| 261 | elif·test·"$rc"·!=·0;·then | ||
| Max diff block lines reached; 921881/930431 bytes (99.08%) of diff not shown. | |||
| Offset 15294, 408 lines modified | Offset 15294, 408 lines modified | ||
| 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | ||
| 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bc40:·5265·6d65·6469·6174·696f·6e20· | 0003bc40:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003bc50:·6c20·736 | 0003bc50:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003bc60:·3c62 | 0003bc60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003bc70:·7 | 0003bc70:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003bc80:·6 | 0003bc80:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003bc90:·3831 | 0003bc90:·6964·6d38·3134·3122·3e3c·7461·626c·6520··idm8141"><table· | ||
| 0003bca0:· | 0003bca0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003bcb0:· | 0003bcb0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003bcc0:· | 0003bcc0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003bcd0:· | 0003bcd0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003bce0:·7 | 0003bce0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003bcf0:· | 0003bcf0:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003bd00:· | 0003bd00:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003bd10:·7 | 0003bd10:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003bd20:·3 | 0003bd20:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003bd30:· | 0003bd30:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003bd40:· | 0003bd40:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003bd50:·7 | 0003bd50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bd60:· | 0003bd60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003bd70:·6 | 0003bd70:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003bd80:· | 0003bd80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003bd90:· | 0003bd90:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003bda0:· | 0003bda0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003bdb0:·6 | 0003bdb0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003bdc0:· | 0003bdc0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003bdd0:·6 | 0003bdd0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003bde0:· | 0003bde0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003bdf0:· | 0003bdf0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003be00:· | 0003be00:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003be10:· | 0003be10:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003be20:· | 0003be20:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003be30:· | 0003be30:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003be40:· | 0003be40:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003be50:· | 0003be50:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003be60:· | 0003be60:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003be70:· | 0003be70:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003be80:· | 0003be80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003be90:· | 0003be90:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003bea0:· | 0003bea0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003beb0:·20 | 0003beb0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003bec0:· | 0003bec0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003bed0:· | 0003bed0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003bee0:·6 | 0003bee0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003bef0:·2 | 0003bef0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003bf00:· | 0003bf00:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003bf10:· | 0003bf10:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003bf20:· | 0003bf20:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003bf30:· | 0003bf30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003bf40:· | 0003bf40:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003bf50:·6 | 0003bf50:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003bf60:·2 | 0003bf60:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003bf70:·6 | 0003bf70:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003bf80:· | 0003bf80:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003bf90:· | 0003bf90:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003bfa0:·6 | 0003bfa0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003bfb0:· | 0003bfb0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003bfc0:· | 0003bfc0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003bfd0:· | 0003bfd0:·7768·656e·3a0a·2020·2d20·6e6f·7420·2820··when:.··-·not·(· | ||
| 0003bfe0:· | 0003bfe0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | ||
| 0003bff0:·62 | 0003bff0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c000:·6 | 0003c000:·6573·2061·6e64·2022·7270·6d2d·6f73·7472··es·and·"rpm-ostr | ||
| 0003c010:· | 0003c010:·6565·2220·696e·2061·6e73·6962·6c65·5f66··ee"·in·ansible_f | ||
| 0003c020:· | 0003c020:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003c030:· | 0003c030:·2020·616e·6420·2262·6f6f·7463·2220·696e····and·"bootc"·in | ||
| 0003c040:· | 0003c040:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003c050:·6 | 0003c050:·6163·6b61·6765·7320·616e·6420·6e6f·7420··ackages·and·not· | ||
| 0003c060:· | 0003c060:·226f·7065·6e73·6869·6674·2d6b·7562·656c··"openshift-kubel | ||
| 0003c070:·657 | 0003c070:·6574·2220·696e·2061·6e73·6962·6c65·5f66··et"·in·ansible_f | ||
| 0003c080:· | 0003c080:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003c090:· | 0003c090:·2020·290a·2020·2d20·616e·7369·626c·655f····).··-·ansible_ | ||
| 0003c0a0:· | 0003c0a0:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003c0b0:· | 0003c0b0:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003c0c0:·7 | 0003c0c0:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003c0d0:·22 | 0003c0d0:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003c0e0:·20 | 0003c0e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003c0f0:· | 0003c0f0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003c100:· | 0003c100:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003c110:· | 0003c110:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c120:·3 | 0003c120:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003c130:·2 | 0003c130:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003c140:· | 0003c140:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c150:· | 0003c150:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003c160:· | 0003c160:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003c170:· | 0003c170:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c180:· | 0003c180:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003c190:· | 0003c190:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003c1a0:· | 0003c1a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c1b0:· | 0003c1b0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003c1c0:· | 0003c1c0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003c1d0:· | 0003c1d0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003c1e0:· | 0003c1e0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003c1f0:· | 0003c1f0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003c200:· | 0003c200:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003c210:·6 | 0003c210:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003c220:·6 | 0003c220:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003c230:· | 0003c230:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003c240:· | 0003c240:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003c250:· | 0003c250:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003c260:· | 0003c260:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c270:· | 0003c270:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003c280:· | 0003c280:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003c290:· | 0003c290:·6420·287a·7970·7065·7229·270a·2020·7365··d·(zypper)'.··se | ||
| 0003c2a0:· | 0003c2a0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c2b0:· | 0003c2b0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c2c0:· | 0003c2c0:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | ||
| 0003c2d0:·2 | 0003c2d0:·7220·696e·202d·6620·2d79·0a20·2077·6865··r·in·-f·-y.··whe | ||
| 0003c2e0:· | 0003c2e0:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003c2f0:· | 0003c2f0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003c300:· | 0003c300:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003c310:· | 0003c310:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003c320:· | 0003c320:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c330:· | 0003c330:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003c340:· | 0003c340:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003c350:·7 | 0003c350:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003c360:·6 | 0003c360:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003c370:· | 0003c370:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003c380:· | 0003c380:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c390:· | 0003c390:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003c3a0:· | 0003c3a0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| Max diff block lines reached; 17799262/17854214 bytes (99.69%) of diff not shown. | |||
| Offset 15233, 282 lines modified | Offset 15233, 282 lines modified | ||
| 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b870:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b880:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b890:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b8a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b8b0:·2069·643d·2269·646d·3834·3830·223e·3c74···id="idm8480"><t | |||
| 0003b8c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b8d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b8e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b8f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b900:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b910:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b930:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b870:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b880:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b890:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8c0:·646d·3834·3830·223e·3c70·7265·3e3c·636f··dm8480"><pre><co | |||
| 0003b8d0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b8e0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b8f0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b900:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b910:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b920:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b930:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b940:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b950:·6964·6d38·3438·3122·2074·6162·696e·6465··idm8481"·tabinde | |||
| 0003b960:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b970:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b980:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b990:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b9a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b9b0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b9c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d38·3438·3122·3e3c·7461·626c·6520·636c··m8481"><table·cl | |||
| 0003ba10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b940:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003ba70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b950:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b960:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b970:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003baa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bab0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bac0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bad0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bae0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003baf0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bb00:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bb10:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bb20:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bb30:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bb40:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b | 0003b980:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b990:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b9a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b9b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b9c0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b9d0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b9e0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b9f0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003ba00:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ba10:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003ba20:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003ba30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba40:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003ba50:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003ba60:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003ba70:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003ba80:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003ba90:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003baa0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bab0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bac0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bad0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bae0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003baf0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003bb00:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bb10:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bb20:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bb30:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003bb40:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003bb50:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003bb60:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003bb70:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003bb80:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bb90:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003bba0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003bbb0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bbc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbe0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bbf0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bc00:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bc10:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bc20:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bc30:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bc40:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bc50:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003bc60:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | ||
| 0003b | 0003bc70:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003bc80:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003bc90:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003bca0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003bcb0:·7267·6574·3d22·2369·646d·3834·3831·2220··rget="#idm8481"· | ||
| 0003b | 0003bcc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003bcd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003bce0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003bcf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003bd00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003bd10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b | 0003bd20:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | ||
| 0003b | 0003bd30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| Max diff block lines reached; 32559300/32596864 bytes (99.88%) of diff not shown. | |||
| Offset 15251, 282 lines modified | Offset 15251, 282 lines modified | ||
| 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | ||
| 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b990:·6d65·6469·6174·696f·6e20·4 | 0003b990:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b9a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b9b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b9e0:·6d38·3438·3022·3e3c·7461·626c·6520·636c··m8480"><table·cl | |||
| 0003b9f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ba40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b9a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b9b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b9e0:·7365·2220·6964·3d22·6964·6d38·3438·3022··se"·id="idm8480" | |||
| 0003b9f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003ba00:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003ba10:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003ba20:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ba30:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ba40:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba50:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ba60:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ba70:·7461·7267·6574·3d22·2369·646d·3834·3831··target="#idm8481 | |||
| 0003ba80:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba90:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003baa0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bab0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bac0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bad0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bae0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003baf0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bb00:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bb10:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bb20:·6522·2069·643d·2269·646d·3834·3831·223e··e"·id="idm8481"> | |||
| 0003bb30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bb40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bb50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bb60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bb70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003ba60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003ba70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bba0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bbb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003ba80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003ba90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003baa0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003bab0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003bbe0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bbf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bc00:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bc10:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bc20:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003bc30:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003bc40:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003bc50:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bc60:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bc70:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003bac0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003bad0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bae0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003baf0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003bb00:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003bb10:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003bb20:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003bb30:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bb40:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bb50:·3039·2d36·3531·3031·300a·2020·2d20·4e49··09-651010.··-·NI | |||
| 0003bb60:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bb70:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003bb80:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003bb90:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003bba0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003bbb0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003bbc0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003bbd0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003bbe0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003bbf0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003bc00:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003bc10:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003bc20:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003bc30:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003bc40:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003bc50:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003bc60:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003bc70:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003bc80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003bc90:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003bca0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bcb0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bcc0:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bcd0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bce0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bcf0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bd00:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bd10:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bd20:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bd30:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bd40:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bd50:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bd60:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bd70:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bd80:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b | 0003bd90:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b | 0003bda0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b | 0003bdb0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b | 0003bdc0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b | 0003bdd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b | 0003bde0:·6964·6d38·3438·3122·2074·6162·696e·6465··idm8481"·tabinde | ||
| 0003b | 0003bdf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b | 0003be00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b | 0003be10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b | 0003be20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b | 0003be30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b | 0003be40:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0003b | 0003be50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003be60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| Max diff block lines reached; 32472270/32509834 bytes (99.88%) of diff not shown. | |||
| Offset 15023, 195 lines modified | Offset 15023, 195 lines modified | ||
| 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | ||
| 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003ab60:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ab70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ab80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ab90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aba0:·646d·3235·3130·223e·3c70·7265·3e3c·636f··dm2510"><pre><co | |||
| 0003abb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003abc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003abd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003abe0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003abf0:·2d2d·7175·6965·7420·2d71·2062·696e·643b··--quiet·-q·bind; | |||
| 0003ac00:·2074·6865·6e0a·0a66·756e·6374·696f·6e20···then..function· | |||
| 0003ac10:·7265·6d65·6469·6174·655f·6269·6e64·5f63··remediate_bind_c | |||
| 0003ac20:·7279·7074·6f5f·706f·6c69·6379·2829·207b··rypto_policy()·{ | |||
| 0003ac30:·0a09·434f·4e46·4947·5f46·494c·453d·222f··..CONFIG_FILE="/ | |||
| 0003ac40:·6574·632f·6e61·6d65·642e·636f·6e66·220a··etc/named.conf". | |||
| 0003ac50:·0969·6620·7465·7374·202d·6620·2224·434f··.if·test·-f·"$CO | |||
| 0003ac60:·4e46·4947·5f46·494c·4522·3b20·7468·656e··NFIG_FILE";·then | |||
| 0003ac70:·0a09·0973·6564·202d·6920·2773·7c6f·7074··...sed·-i·'s|opt | |||
| 0003ac80:·696f·6e73·207b·7c26·616d·703b·5c6e·5c74··ions·{|&\n\t | |||
| 0003ac90:·696e·636c·7564·6520·222f·6574·632f·6372··include·"/etc/cr | |||
| 0003aca0:·7970·746f·2d70·6f6c·6963·6965·732f·6261··ypto-policies/ba | |||
| 0003acb0:·636b·2d65·6e64·732f·6269·6e64·2e63·6f6e··ck-ends/bind.con | |||
| 0003acc0:·6669·6722·3b7c·2720·2224·434f·4e46·4947··fig";|'·"$CONFIG | |||
| 0003acd0:·5f46·494c·4522·0a09·0972·6574·7572·6e20··_FILE"...return· | |||
| 0003a | 0003ab60:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003ab70:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ab80:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ab90:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aba0:·3d22·6964·6d32·3531·3022·3e3c·7461·626c··="idm2510"><tabl | |||
| 0003abb0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003abc0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003abd0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003abe0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003abf0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ac00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ac10:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ac20:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ac30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ac40:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ac50:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ac60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ac70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ac80:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| 0003ac90:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aca0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003acb0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003acc0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003acd0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003ace0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003acf0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ad00:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003ad10:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003ad20:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003ad30:·2d35·332d·5343·2d31·330a·2020·2d20·636f··-53-SC-13.··-·co | |||
| 0003ad40:·6e66·6967·7572·655f·6269·6e64·5f63·7279··nfigure_bind_cry | |||
| 0003ad50:·7074·6f5f·706f·6c69·6379·0a20·202d·2063··pto_policy.··-·c | |||
| 0003ad60:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | |||
| 0003ad70:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003ad80:·6974·790a·2020·2d20·6c6f·775f·636f·6d70··ity.··-·low_comp | |||
| 0003ad90:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ada0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003adb0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003adc0:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003add0:·6520·4249·4e44·2074·6f20·7573·6520·5379··e·BIND·to·use·Sy | |||
| 0003ade0:·7374·656d·2043·7279·7074·6f20·506f·6c69··stem·Crypto·Poli | |||
| 0003adf0:·6379·202d·2043·6865·636b·2042·494e·4420··cy·-·Check·BIND· | |||
| 0003ae00:·636f·6e66·6967·7572·6174·696f·6e20·6669··configuration·fi | |||
| 0003ae10:·6c65·0a20·2020·2065·7869·7374·730a·2020··le.····exists.·· | |||
| 0003ae20:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | |||
| 0003ae30:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | |||
| 0003ae40:·2f65·7463·2f6e·616d·6564·2e63·6f6e·660a··/etc/named.conf. | |||
| 0003ae50:·2020·7265·6769·7374·6572·3a20·6269·6e64····register:·bind | |||
| 0003ae60:·5f63·6f6e·6669·675f·6669·6c65·0a20·2077··_config_file.··w | |||
| 0003ae70:·6865·6e3a·2027·2262·696e·6422·2069·6e20··hen:·'"bind"·in· | |||
| 0003ae80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003ae90:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003aea0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003aeb0:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003aec0:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003aed0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003aee0:·332d·5343·2d31·330a·2020·2d20·636f·6e66··3-SC-13.··-·conf | |||
| 0003aef0:·6967·7572·655f·6269·6e64·5f63·7279·7074··igure_bind_crypt | |||
| 0003af00:·6f5f·706f·6c69·6379·0a20·202d·2063·6f6e··o_policy.··-·con | |||
| 0003af10:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 0003af20:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003af60:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | |||
| 0003af70:·6e61·6d65·3a20·436f·6e66·6967·7572·6520··name:·Configure· | |||
| 0003af80:·4249·4e44·2074·6f20·7573·6520·5379·7374··BIND·to·use·Syst | |||
| 0003af90:·656d·2043·7279·7074·6f20·506f·6c69·6379··em·Crypto·Policy | |||
| 0003afa0:·202d·2041·626f·7274·696e·6720·7265·6d65···-·Aborting·reme | |||
| 0003afb0:·6469·6174·696f·6e2c·2066·696c·6520·6e6f··diation,·file·no | |||
| 0003afc0:·740a·2020·2020·666f·756e·640a·2020·616e··t.····found.··an | |||
| 0003afd0:·7369·626c·652e·6275·696c·7469·6e2e·6465··sible.builtin.de | |||
| 0003afe0:·6275·673a·0a20·2020·206d·7367·3a20·4162··bug:.····msg:·Ab | |||
| 0003a | 0003aff0:·6f72·7469·6e67·2072·656d·6564·6961·7469··orting·remediati | ||
| 0003b000:·6f6e·2061·7320·272f·6574·632f·6e61·6d65··on·as·'/etc/name | |||
| 0003b010:·642e·636f·6e66·2720·7761·7320·6e6f·7420··d.conf'·was·not· | |||
| 0003b020:·666f·756e·642e·0a20·2077·6865·6e3a·0a20··found..··when:.· | |||
| 0003b030:·202d·2027·2262·696e·6422·2069·6e20·616e···-·'"bind"·in·an | |||
| 0003b040:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b050:·6167·6573·270a·2020·2d20·6e6f·7420·6269··ages'.··-·not·bi | |||
| 0003b060:·6e64·5f63·6f6e·6669·675f·6669·6c65·2e73··nd_config_file.s | |||
| 0003b070:·7461·742e·6578·6973·7473·0a20·2074·6167··tat.exists.··tag | |||
| 0003b080:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0003b090:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b0a0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b0b0:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b0c0:·302d·3533·2d53·432d·3133·0a20·202d·2063··0-53-SC-13.··-·c | |||
| 0003b0d0:·6f6e·6669·6775·7265·5f62·696e·645f·6372··onfigure_bind_cr | |||
| 0003b0e0:·7970·746f·5f70·6f6c·6963·790a·2020·2d20··ypto_policy.··-· | |||
| 0003b0f0:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | |||
| 0003b100:·6779·0a20·202d·2068·6967·685f·7365·7665··gy.··-·high_seve | |||
| 0003b110:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003b120:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b130:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 0003b140:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| Max diff block lines reached; 18704570/18730128 bytes (99.86%) of diff not shown. | |||
| Offset 15236, 408 lines modified | Offset 15236, 408 lines modified | ||
| 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b8a0:· | 0003b8a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b8b0:·3c2f | 0003b8b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b8c0:· | 0003b8c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b8d0:·7365 | 0003b8d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b8e0:·2269 | 0003b8e0:·6964·3d22·6964·6d31·3838·3622·3e3c·7461··id="idm1886"><ta | ||
| 0003b8f0:·6 | 0003b8f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b900:· | 0003b900:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b910:· | 0003b910:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b920:· | 0003b920:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b930:· | 0003b930:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b940:· | 0003b940:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b950:· | 0003b950:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b960:· | 0003b960:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b970:· | 0003b970:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b980:·3 | 0003b980:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b990:· | 0003b990:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b9a0:·3 | 0003b9a0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b9b0:· | 0003b9b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b9c0:·6 | 0003b9c0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b9d0:· | 0003b9d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b9e0:· | 0003b9e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b9f0:·6 | 0003b9f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003ba00:·6 | 0003ba00:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003ba10:·6 | 0003ba10:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003ba20:· | 0003ba20:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003ba30:· | 0003ba30:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003ba40:· | 0003ba40:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003ba50:· | 0003ba50:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003ba60:· | 0003ba60:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003ba70:· | 0003ba70:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003ba80:· | 0003ba80:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003ba90:· | 0003ba90:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003baa0:· | 0003baa0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003bab0:· | 0003bab0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003bac0:· | 0003bac0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bad0:· | 0003bad0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003bae0:· | 0003bae0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003baf0:· | 0003baf0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bb00:·2 | 0003bb00:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003bb10:· | 0003bb10:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003bb20:· | 0003bb20:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003bb30:·2 | 0003bb30:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003bb40:· | 0003bb40:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003bb50:·6 | 0003bb50:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003bb60:·6 | 0003bb60:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003bb70:· | 0003bb70:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bb80:· | 0003bb80:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bb90:· | 0003bb90:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bba0:· | 0003bba0:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| 0003bbb0:·6 | 0003bbb0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003bbc0:·6 | 0003bbc0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003bbd0:· | 0003bbd0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003bbe0:· | 0003bbe0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003bbf0:· | 0003bbf0:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003bc00:·7 | 0003bc00:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003bc10:· | 0003bc10:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bc20:· | 0003bc20:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003bc30:· | 0003bc30:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003bc40:·6 | 0003bc40:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bc50:· | 0003bc50:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003bc60:·6 | 0003bc60:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003bc70:·6 | 0003bc70:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003bc80:· | 0003bc80:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003bc90:· | 0003bc90:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bca0:·7 | 0003bca0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003bcb0:· | 0003bcb0:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003bcc0:·7 | 0003bcc0:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003bcd0:· | 0003bcd0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003bce0:·20 | 0003bce0:·730a·2020·2020·290a·2020·2d20·616e·7369··s.····).··-·ansi | ||
| 0003bcf0:· | 0003bcf0:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | ||
| 0003bd00:·206 | 0003bd00:·2069·6e20·5b20·2246·6564·6f72·6122·2c20···in·[·"Fedora",· | ||
| 0003bd10:· | 0003bd10:·2252·6564·4861·7422·2c20·2243·656e·744f··"RedHat",·"CentO | ||
| 0003bd20:· | 0003bd20:·5322·2c20·224f·7261·636c·654c·696e·7578··S",·"OracleLinux | ||
| 0003bd30:· | 0003bd30:·2220·5d0a·2020·7461·6773·3a0a·2020·2d20··"·].··tags:.··-· | ||
| 0003bd40:· | 0003bd40:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bd50:· | 0003bd50:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bd60:· | 0003bd60:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bd70:·3 | 0003bd70:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bd80:· | 0003bd80:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bd90:· | 0003bd90:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bda0:· | 0003bda0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bdb0:· | 0003bdb0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bdc0:· | 0003bdc0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bdd0:· | 0003bdd0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bde0:· | 0003bde0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bdf0:· | 0003bdf0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003be00:· | 0003be00:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003be10:·2 | 0003be10:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003be20:· | 0003be20:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003be30:· | 0003be30:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003be40:·6 | 0003be40:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003be50:· | 0003be50:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003be60:· | 0003be60:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003be70:·202 | 0003be70:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003be80:· | 0003be80:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003be90:·5 | 0003be90:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bea0:· | 0003bea0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003beb0:· | 0003beb0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bec0:· | 0003bec0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003bed0:· | 0003bed0:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003bee0:· | 0003bee0:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003bef0:·2 | 0003bef0:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003bf00:· | 0003bf00:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003bf10:· | 0003bf10:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003bf20:· | 0003bf20:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003bf30:·20 | 0003bf30:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003bf40:· | 0003bf40:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003bf50:· | 0003bf50:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bf60:· | 0003bf60:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003bf70:·2 | 0003bf70:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003bf80:· | 0003bf80:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bf90:· | 0003bf90:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003bfa0:·6 | 0003bfa0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bfb0:· | 0003bfb0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003bfc0:·202 | 0003bfc0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003bfd0:·6 | 0003bfd0:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003bfe0:· | 0003bfe0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bff0:· | 0003bff0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003c000:·5 | 0003c000:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | ||
| Max diff block lines reached; 26869348/26924300 bytes (99.80%) of diff not shown. | |||
| Offset 15177, 408 lines modified | Offset 15177, 408 lines modified | ||
| 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:· | 0003b4f0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b500:·3c2f | 0003b500:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b510:· | 0003b510:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b520:·7365 | 0003b520:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b530:·2269 | 0003b530:·6964·3d22·6964·6d31·3838·3622·3e3c·7461··id="idm1886"><ta | ||
| 0003b540:·6 | 0003b540:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b550:· | 0003b550:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b560:· | 0003b560:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b570:· | 0003b570:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b580:· | 0003b580:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b590:· | 0003b590:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b5a0:· | 0003b5a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b5b0:· | 0003b5b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b5c0:· | 0003b5c0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b5d0:·3 | 0003b5d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b5e0:· | 0003b5e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b5f0:·3 | 0003b5f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b600:· | 0003b600:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b610:·6 | 0003b610:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b620:· | 0003b620:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b630:· | 0003b630:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b640:·6 | 0003b640:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003b650:·6 | 0003b650:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003b660:·6 | 0003b660:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003b670:· | 0003b670:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003b680:· | 0003b680:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003b690:· | 0003b690:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003b6a0:· | 0003b6a0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003b6b0:· | 0003b6b0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b6c0:· | 0003b6c0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003b6d0:· | 0003b6d0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003b6e0:· | 0003b6e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b6f0:· | 0003b6f0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003b700:· | 0003b700:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003b710:· | 0003b710:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b720:· | 0003b720:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003b730:· | 0003b730:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003b740:· | 0003b740:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b750:·2 | 0003b750:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003b760:· | 0003b760:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003b770:· | 0003b770:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003b780:·2 | 0003b780:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003b790:· | 0003b790:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003b7a0:·6 | 0003b7a0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003b7b0:·6 | 0003b7b0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003b7c0:· | 0003b7c0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003b7d0:· | 0003b7d0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003b7e0:· | 0003b7e0:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003b7f0:· | 0003b7f0:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| 0003b800:·6 | 0003b800:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003b810:·6 | 0003b810:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003b820:· | 0003b820:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003b830:· | 0003b830:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003b840:· | 0003b840:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003b850:·7 | 0003b850:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003b860:· | 0003b860:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003b870:· | 0003b870:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003b880:· | 0003b880:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003b890:·6 | 0003b890:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003b8a0:· | 0003b8a0:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003b8b0:·6 | 0003b8b0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003b8c0:·6 | 0003b8c0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003b8d0:· | 0003b8d0:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003b8e0:· | 0003b8e0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b8f0:·7 | 0003b8f0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003b900:· | 0003b900:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003b910:·7 | 0003b910:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003b920:· | 0003b920:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003b930:·20 | 0003b930:·730a·2020·2020·290a·2020·2d20·616e·7369··s.····).··-·ansi | ||
| 0003b940:· | 0003b940:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | ||
| 0003b950:·206 | 0003b950:·2069·6e20·5b20·2246·6564·6f72·6122·2c20···in·[·"Fedora",· | ||
| 0003b960:· | 0003b960:·2252·6564·4861·7422·2c20·2243·656e·744f··"RedHat",·"CentO | ||
| 0003b970:· | 0003b970:·5322·2c20·224f·7261·636c·654c·696e·7578··S",·"OracleLinux | ||
| 0003b980:· | 0003b980:·2220·5d0a·2020·7461·6773·3a0a·2020·2d20··"·].··tags:.··-· | ||
| 0003b990:· | 0003b990:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003b9a0:· | 0003b9a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b9b0:· | 0003b9b0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b9c0:·3 | 0003b9c0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b9d0:· | 0003b9d0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b9e0:· | 0003b9e0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b9f0:· | 0003b9f0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003ba00:· | 0003ba00:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003ba10:· | 0003ba10:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003ba20:· | 0003ba20:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003ba30:· | 0003ba30:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003ba40:· | 0003ba40:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003ba50:· | 0003ba50:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003ba60:·2 | 0003ba60:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003ba70:· | 0003ba70:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003ba80:· | 0003ba80:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003ba90:·6 | 0003ba90:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003baa0:· | 0003baa0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bab0:· | 0003bab0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bac0:·202 | 0003bac0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bad0:· | 0003bad0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bae0:·5 | 0003bae0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003baf0:· | 0003baf0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bb00:· | 0003bb00:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bb10:· | 0003bb10:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003bb20:· | 0003bb20:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003bb30:· | 0003bb30:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003bb40:·2 | 0003bb40:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003bb50:· | 0003bb50:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003bb60:· | 0003bb60:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003bb70:· | 0003bb70:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003bb80:·20 | 0003bb80:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003bb90:· | 0003bb90:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003bba0:· | 0003bba0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bbb0:· | 0003bbb0:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003bbc0:·2 | 0003bbc0:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003bbd0:· | 0003bbd0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bbe0:· | 0003bbe0:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003bbf0:·6 | 0003bbf0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bc00:· | 0003bc00:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003bc10:·202 | 0003bc10:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003bc20:·6 | 0003bc20:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003bc30:· | 0003bc30:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bc40:· | 0003bc40:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003bc50:·5 | 0003bc50:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | ||
| Max diff block lines reached; 14185682/14240634 bytes (99.61%) of diff not shown. | |||
| Offset 100, 33 lines modified | Offset 100, 14 lines modified | ||
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 110 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 111 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 112 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 113 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 114 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 115 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 125 | -·name:·Gather·the·package·facts | 112 | -·name:·Gather·the·package·facts |
| 126 | ··package_facts: | 113 | ··package_facts: |
| Offset 293, 14 lines modified | Offset 274, 33 lines modified | ||
| 293 | ··-·PCI-DSSv4-11.5.2 | 274 | ··-·PCI-DSSv4-11.5.2 |
| 294 | ··-·high_complexity | 275 | ··-·high_complexity |
| 295 | ··-·high_severity | 276 | ··-·high_severity |
| 296 | ··-·medium_disruption | 277 | ··-·medium_disruption |
| 297 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 298 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 299 | ··-·rpm_verify_hashes | 280 | ··-·rpm_verify_hashes |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 284 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 285 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 286 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 287 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 288 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 289 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 290 | fi | ||
| 291 | else | ||
| 292 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 293 | fi | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 301 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 295 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 302 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 296 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 303 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 297 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 304 | $·rpm·-qf·FILENAME | 298 | $·rpm·-qf·FILENAME |
| 305 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 299 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 321, 50 lines modified | Offset 321, 14 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 343 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 344 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 345 | ········do | ||
| 346 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 347 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 348 | ········done | ||
| 349 | done | ||
| 350 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 351 | #·correct·values | ||
| 352 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 353 | do | ||
| 354 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 355 | done | ||
| 356 | else | ||
| 357 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 358 | fi | ||
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 364 | -·name:·Gather·the·package·facts | 333 | -·name:·Gather·the·package·facts |
| 365 | ··package_facts: | 334 | ··package_facts: |
| Offset 476, 14 lines modified | Offset 440, 50 lines modified | ||
| 476 | ··-·PCI-DSSv4-11.5.2 | 440 | ··-·PCI-DSSv4-11.5.2 |
| 477 | ··-·high_complexity | 441 | ··-·high_complexity |
| 478 | ··-·high_severity | 442 | ··-·high_severity |
| 479 | ··-·medium_disruption | 443 | ··-·medium_disruption |
| 480 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 481 | ··-·restrict_strategy | 445 | ··-·restrict_strategy |
| 482 | ··-·rpm_verify_permissions | 446 | ··-·rpm_verify_permissions |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1110088/1118169 bytes (99.28%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | ||
| 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b460:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b460:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b470:·6c6 | 0003b470:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b480:·3e3c | 0003b480:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b490:·2270 | 0003b490:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b4a0:·6 | 0003b4a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b4b0:·6 | 0003b4b0:·2269·646d·3138·3836·223e·3c74·6162·6c65··"idm1886"><table | ||
| 0003b4c0:· | 0003b4c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b4d0:·6 | 0003b4d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b4e0:·6 | 0003b4e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b4f0:· | 0003b4f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b500:· | 0003b500:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b510:· | 0003b510:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b520:· | 0003b520:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b530:· | 0003b530:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b540:· | 0003b540:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b550:· | 0003b550:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b560:· | 0003b560:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b570:· | 0003b570:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b580:· | 0003b580:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b590:· | 0003b590:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b5a0:· | 0003b5a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b5b0:·6 | 0003b5b0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b5c0:· | 0003b5c0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b5d0:· | 0003b5d0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b5e0:·6 | 0003b5e0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b5f0:· | 0003b5f0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b600:·6 | 0003b600:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b610:· | 0003b610:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b620:· | 0003b620:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b630:· | 0003b630:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b640:· | 0003b640:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b650:·2 | 0003b650:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b660:· | 0003b660:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b670:· | 0003b670:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b680:·2 | 0003b680:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b690:· | 0003b690:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b6a0:· | 0003b6a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b6b0:· | 0003b6b0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b6c0:· | 0003b6c0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b6d0:· | 0003b6d0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b6e0:·2 | 0003b6e0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b6f0:· | 0003b6f0:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b700:·6 | 0003b700:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b710:· | 0003b710:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b720:· | 0003b720:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b730:· | 0003b730:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b740:·6 | 0003b740:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b750:·7 | 0003b750:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b760:· | 0003b760:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b770:· | 0003b770:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b780:· | 0003b780:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b790:·6 | 0003b790:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b7a0:· | 0003b7a0:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b7b0:· | 0003b7b0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b7c0:·6 | 0003b7c0:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b7d0:· | 0003b7d0:·6569·6e73·7461·6c6c·5f63·6d64·3a20·646e··einstall_cmd:·dn | ||
| 0003b7e0:·6 | 0003b7e0:·6620·7265·696e·7374·616c·6c20·2d79·0a20··f·reinstall·-y.· | ||
| 0003b7f0:· | 0003b7f0:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b800:· | 0003b800:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b810:· | 0003b810:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b820:· | 0003b820:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b830:·7 | 0003b830:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b840:· | 0003b840:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b850:· | 0003b850:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b860:· | 0003b860:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b870:· | 0003b870:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003b880:· | 0003b880:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003b890:· | 0003b890:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003b8a0:· | 0003b8a0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b8b0:· | 0003b8b0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003b8c0:· | 0003b8c0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b8d0:· | 0003b8d0:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b8e0:· | 0003b8e0:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b8f0:· | 0003b8f0:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b900:· | 0003b900:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b910:· | 0003b910:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b920:· | 0003b920:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b930:· | 0003b930:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b940:·3 | 0003b940:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b950:· | 0003b950:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b960:· | 0003b960:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b970:· | 0003b970:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b980:· | 0003b980:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b990:· | 0003b990:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b9a0:· | 0003b9a0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b9b0:·3 | 0003b9b0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b9c0:· | 0003b9c0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b9d0:· | 0003b9d0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b9e0:· | 0003b9e0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b9f0:· | 0003b9f0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003ba00:·20 | 0003ba00:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003ba10:·6 | 0003ba10:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003ba20:·6 | 0003ba20:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003ba30:· | 0003ba30:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003ba40:·6 | 0003ba40:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003ba50:· | 0003ba50:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003ba60:· | 0003ba60:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003ba70:· | 0003ba70:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003ba80:· | 0003ba80:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003ba90:· | 0003ba90:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003baa0:·20 | 0003baa0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003bab0:· | 0003bab0:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003bac0:· | 0003bac0:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003bad0:· | 0003bad0:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003bae0:· | 0003bae0:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003baf0:· | 0003baf0:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003bb00:· | 0003bb00:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003bb10:· | 0003bb10:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003bb20:· | 0003bb20:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bb30:· | 0003bb30:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003bb40:· | 0003bb40:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bb50:· | 0003bb50:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003bb60:· | 0003bb60:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003bb70:· | 0003bb70:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bb80:·6 | 0003bb80:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003bb90:· | 0003bb90:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003bba0:· | 0003bba0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bbb0:·7 | 0003bbb0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003bbc0:· | 0003bbc0:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 7315610/7370562 bytes (99.25%) of diff not shown. | |||
| Offset 99, 33 lines modified | Offset 99, 14 lines modified | ||
| 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 108 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 109 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 110 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 111 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 112 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 113 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 114 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 124 | -·name:·Gather·the·package·facts | 111 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 112 | ··package_facts: |
| Offset 292, 14 lines modified | Offset 273, 33 lines modified | ||
| 292 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 293 | ··-·high_complexity | 274 | ··-·high_complexity |
| 294 | ··-·high_severity | 275 | ··-·high_severity |
| 295 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 296 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 297 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 298 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 282 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 283 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 284 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 285 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 286 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 287 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 288 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 289 | fi | ||
| 290 | else | ||
| 291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 292 | fi | ||
| 299 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 301 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 302 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 303 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 304 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 320, 50 lines modified | Offset 320, 14 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 342 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 343 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 344 | ········do | ||
| 345 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 346 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 347 | ········done | ||
| 348 | done | ||
| 349 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 350 | #·correct·values | ||
| 351 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 352 | do | ||
| 353 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 354 | done | ||
| 355 | else | ||
| 356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 357 | fi | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 363 | -·name:·Gather·the·package·facts | 332 | -·name:·Gather·the·package·facts |
| 364 | ··package_facts: | 333 | ··package_facts: |
| Offset 475, 14 lines modified | Offset 439, 50 lines modified | ||
| 475 | ··-·PCI-DSSv4-11.5.2 | 439 | ··-·PCI-DSSv4-11.5.2 |
| 476 | ··-·high_complexity | 440 | ··-·high_complexity |
| 477 | ··-·high_severity | 441 | ··-·high_severity |
| 478 | ··-·medium_disruption | 442 | ··-·medium_disruption |
| 479 | ··-·no_reboot_needed | 443 | ··-·no_reboot_needed |
| 480 | ··-·restrict_strategy | 444 | ··-·restrict_strategy |
| 481 | ··-·rpm_verify_permissions | 445 | ··-·rpm_verify_permissions |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 716346/724424 bytes (98.88%) of diff not shown. | |||
| Offset 15063, 133 lines modified | Offset 15063, 133 lines modified | ||
| 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | ||
| 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003add0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003add0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003ade0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003adf0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ade0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003adf0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae20:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ae30:·3330·223e·3c70·7265·3e3c·636f·6465·3e0a··30"><pre><code>. | |||
| 0003ae40:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ae50:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ae60:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ae70:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ae80:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ae90:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ae | 0003ae10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003ae20:·3d22·6964·6d37·3330·223e·3c74·6162·6c65··="idm730"><table | |||
| 0003ae30:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ae40:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ae50:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ae60:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ae70:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003aeb0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003aec0:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | |||
| 0003aed0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003aee0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003aef0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003af00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003af10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003af20:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003af30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af60:·7073·6522·2069·643d·2269·646d·3733·3122··pse"·id="idm731" | |||
| 0003af70:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003af80:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af90:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003afa0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003afb0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003afc0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003afd0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003afe0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003a | 0003ae80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003aea0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003aeb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003aec0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003aed0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003aee0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b010:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b020:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b030:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b040:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b050:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b060:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b070:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003 | 0003aef0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003af00:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003af10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003af20:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003af30:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003af40:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003af50:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003af60:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003af70:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003af80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003af90:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afa0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003afb0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003afc0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003afd0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003afe0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003aff0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b000:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b010:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b020:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b030:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b040:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b050:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b0 | 0003b060:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003b0a0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b0b0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b0 | 0003b070:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | ||
| 0003b080:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b090:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b0a0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b0b0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b0c0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b0d0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b0e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b0f0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b100:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b110:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b120:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b130:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b140:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b150:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b160:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b170:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b180:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b190:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b1a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1e0:·7461·7267·6574·3d22·2369·646d·3733·3122··target="#idm731" | |||
| 0003b1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b250:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b260:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b270:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b280:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b290:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b2a0:·2269·646d·3733·3122·3e3c·7072·653e·3c63··"idm731"><pre><c | |||
| 0003b2b0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| Max diff block lines reached; 2163165/2180167 bytes (99.22%) of diff not shown. | |||
| Offset 116, 31 lines modified | Offset 116, 14 lines modified | ||
| 116 | ···························A.15.2.1,·A.8.2.3 | 116 | ···························A.15.2.1,·A.8.2.3 |
| 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 129 | ··package_facts: |
| Offset 169, 14 lines modified | Offset 152, 31 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 154 | ··-·low_complexity |
| 172 | ··-·low_disruption | 155 | ··-·low_disruption |
| 173 | ··-·medium_severity | 156 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_aide | ||
| 169 | class·install_aide·{ | ||
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution | 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution |
| 178 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 176 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 179 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 180 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 181 | crontab: | 179 | crontab: |
| 182 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 650, 45 lines modified | Offset 650, 14 lines modified | ||
| 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished | 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished |
| 651 | ············executing. | 651 | ············executing. |
| 652 | Severity: ··medium | 652 | Severity: ··medium |
| 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty | 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty |
| 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 |
| 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 | 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 |
| 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 |
| 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 662 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 663 | if·rpm·--quiet·-q·sudo;·then | ||
| 664 | if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 665 | ····cp·/etc/sudoers·/etc/sudoers.bak | ||
| 666 | ····if·!·grep·-P·'^[\s]*Defaults[\s]*\buse_pty\b.*$'·/etc/sudoers;·then | ||
| 667 | ········#·sudoers·file·doesn't·define·Option·use_pty | ||
| 668 | ········echo·"Defaults·use_pty"·>>·/etc/sudoers | ||
| 669 | ····fi | ||
| 670 | ····#·Check·validity·of·sudoers·and·cleanup·bak | ||
| 671 | ····if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 672 | ········rm·-f·/etc/sudoers.bak | ||
| 673 | ····else | ||
| 674 | ········echo·"Fail·to·validate·remediated·/etc/sudoers,·reverting·to·original·file." | ||
| 675 | ········mv·/etc/sudoers.bak·/etc/sudoers | ||
| 676 | ········false | ||
| 677 | ····fi | ||
| 678 | else | ||
| 679 | ····echo·"Skipping·remediation,·/etc/sudoers·failed·to·validate" | ||
| 680 | ····false | ||
| 681 | fi | ||
| 682 | else | ||
| 683 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 684 | fi | ||
| 685 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 686 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 687 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 688 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 689 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 690 | -·name:·Gather·the·package·facts | 662 | -·name:·Gather·the·package·facts |
| 691 | ··package_facts: | 663 | ··package_facts: |
| Offset 717, 47 lines modified | Offset 686, 27 lines modified | ||
| 717 | ··-·PCI-DSSv4-2.2.6 | 686 | ··-·PCI-DSSv4-2.2.6 |
| 718 | ··-·low_complexity | 687 | ··-·low_complexity |
| 719 | ··-·low_disruption | 688 | ··-·low_disruption |
| 720 | ··-·medium_severity | 689 | ··-·medium_severity |
| 721 | ··-·no_reboot_needed | 690 | ··-·no_reboot_needed |
| 722 | ··-·restrict_strategy | 691 | ··-·restrict_strategy |
| 723 | ··-·sudo_add_use_pty | 692 | ··-·sudo_add_use_pty |
| 724 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·S\x8Su\x8ud\x8do\x8o·L\x8Lo\x8og\x8gf\x8fi\x8il\x8le\x8e·E\x8Ex\x8xi\x8is\x8st\x8ts\x8s·-\x8-·s\x8su\x8ud\x8do\x8o·l\x8lo\x8og\x8gf\x8fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 725 | A·custom·log·sudo·file·can·be·configured·with·the·'logfile'·tag.·This·rule·configures·a·sudo | ||
| 726 | custom·logfile·at·the·default·location·suggested·by·CIS,·which·uses·/var/log/sudo.log. | ||
| 727 | Rationale:··A·sudo·log·file·simplifies·auditing·of·sudo·commands. | ||
| 728 | Severity: ··low | ||
| 729 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_custom_logfile | ||
| 730 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | ||
| 731 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | ||
| 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 234855/239896 bytes (97.90%) of diff not shown. | |||
| Offset 15053, 217 lines modified | Offset 15053, 217 lines modified | ||
| 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | ||
| 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ad30:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ad40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ad50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ad60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ad70:·7365·2220·6964·3d22·6964·6d35·3039·3722··se"·id="idm5097" | |||
| 0003ad30:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003ad40:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad80:·3d22·6964·6d35·3039·3722·3e3c·7072·653e··="idm5097"><pre> | |||
| 0003ad90:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ada0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003adb0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003adc0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ad | 0003ad80:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003ad90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ada0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003adb0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003adc0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003add0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ade0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003adf0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ade0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003adf0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ae10:·3d22·2369·646d·3530·3938·2220·7461·6269··="#idm5098"·tabi | |||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003ae80:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aec0:·2269·646d·3530·3938·223e·3c74·6162·6c65··"idm5098"><table | |||
| 0003aed0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aee0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003aef0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af00:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af10:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a | 0003ae00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003af30:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af40:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af60:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003af70:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a | 0003ae10:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003af90:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003afa0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003afb0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003afc0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003afd0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003afe0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003aff0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b000:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b010:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003 | 0003ae20:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003ae30:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003ae40:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ae50:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ae60:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ae70:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ae80:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003ae90:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003aea0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003aeb0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003aec0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003aed0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003aee0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003af00:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003af10:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003af20:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003af30:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003af40:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003af50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003af60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003af70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003af80:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003af90:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003afa0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003afb0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003afc0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003afd0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003afe0:·6573·656e·740a·2020·7768·656e·3a20·2822··esent.··when:·(" | |||
| 0003aff0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b000:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b010:·7320·6f72·2022·6b65·726e·656c·2d75·656b··s·or·"kernel-uek | |||
| 0003b020:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b030:·7473·2e70·6163·6b61·6765·7329·0a20·2074··ts.packages).··t | |||
| 0003b040:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b050:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b060:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b070:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b080:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b090:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0a0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b0b0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b0c0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b0d0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b0e0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b0f0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b100:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b110:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b0 | 0003b120:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b | 0003b130:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b05 | 0003b140:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b | 0003b150:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b | 0003b160:·2d74·6172·6765·743d·2223·6964·6d35·3039··-target="#idm509 | ||
| 0003b08 | 0003b170:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b | 0003b180:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b | 0003b190:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b | 0003b1a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b | 0003b1b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b | 0003b1c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b0e0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b0f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| Max diff block lines reached; 21497016/21525610 bytes (99.87%) of diff not shown. | |||
| Offset 15058, 218 lines modified | Offset 15058, 218 lines modified | ||
| 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | ||
| 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ad80:·6961·7469·6f6e·204 | 0003ad80:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003ad90:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ada0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003adb0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003adc0:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003add0:·3937·223e·3c74·6162·6c65·2063·6c61·7373··97"><table·class | |||
| 0003ade0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003adf0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ae30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ae40:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ad90:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003ada0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003adc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003add0:·2069·643d·2269·646d·3530·3937·223e·3c70···id="idm5097"><p | |||
| 0003ade0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003adf0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ae00:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ae10:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ae20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ae30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ae40:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ae50:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ae60:·6765·743d·2223·6964·6d35·3039·3822·2074··get="#idm5098"·t | |||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003aed0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003aee0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aef0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af00:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003af10:·6964·3d22·6964·6d35·3039·3822·3e3c·7461··id="idm5098"><ta | |||
| 0003af20:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003af30:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003af40:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003af50:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af60:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003ae50:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003a | 0003ae60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003af90:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003afa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a | 0003ae70:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ae80:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ae90:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a | 0003aea0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003afd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afe0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aff0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b000:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b010:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b020:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b030:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b040:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b050:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b060:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003 | 0003aeb0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003aec0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003aed0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003aee0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003aef0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003af00:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003af10:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003af20:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003af30:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003af40:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003af50:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003af60:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003af70:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af80:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af90:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003afa0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003afb0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003afc0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003afd0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003afe0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003aff0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b000:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b010:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b020:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b030:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b040:·2028·226b·6572·6e65·6c22·2069·6e20·616e···("kernel"·in·an | |||
| 0003b050:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b060:·6167·6573·206f·7220·226b·6572·6e65·6c2d··ages·or·"kernel- | |||
| 0003b070:·7565·6b22·2069·6e20·616e·7369·626c·655f··uek"·in·ansible_ | |||
| 0003b080:·6661·6374·732e·7061·636b·6167·6573·290a··facts.packages). | |||
| 0003b090:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b0a0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b0b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b0c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b0d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b0e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b0f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b100:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b110:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b120:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b130:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b140:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b150:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b160:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b | 0003b170:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b180:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b190:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b1a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b1b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b1c0:·3530·3938·2220·7461·6269·6e64·6578·3d22··5098"·tabindex=" | ||
| 0003b0 | 0003b1d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b0 | 0003b1e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b1 | 0003b1f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b200:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b12 | 0003b210:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b220:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b230:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b240:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b250:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| Max diff block lines reached; 21773210/21801942 bytes (99.87%) of diff not shown. | |||
| Offset 15049, 217 lines modified | Offset 15049, 217 lines modified | ||
| 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | ||
| 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003acf0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ad00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ad10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ad20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ad30:·2069·643d·2269·646d·3530·3937·223e·3c74···id="idm5097"><t | |||
| 0003ad40:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ad50:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ad60:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ad70:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ad80:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ad90:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ada0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003adb0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003acf0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003ad00:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ad10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad40:·646d·3530·3937·223e·3c70·7265·3e3c·636f··dm5097"><pre><co | |||
| 0003ad50:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ad60:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ad70:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ad80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ad90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ada0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003adb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003adc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003add0:·6964·6d35·3039·3822·2074·6162·696e·6465··idm5098"·tabinde | |||
| 0003ade0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003adf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ae00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ae10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ae20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003ae30:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003ae40:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ae60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ae70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ae80:·6d35·3039·3822·3e3c·7461·626c·6520·636c··m5098"><table·cl | |||
| 0003ae90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aea0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003aeb0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003aec0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003aed0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003adc0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003aef0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a | 0003add0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003ade0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003a | 0003adf0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003af20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003af30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003af40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003af50:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003af60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af70:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003af80:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003af90:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003afa0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003afb0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003afc0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003a | 0003ae00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003ae10:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ae20:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ae30:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003ae40:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003ae50:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003ae60:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003ae70:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003ae80:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ae90:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003aea0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003aeb0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003aec0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003aed0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003aee0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003aef0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003af00:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003af10:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003af20:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003af30:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003af40:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003af50:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003af60:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003af70:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003af80:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003af90:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003afa0:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003afb0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003afc0:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003afd0:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003afe0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003aff0:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b000:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b010:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b020:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b030:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b040:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b050:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b060:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b070:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b080:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b090:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b0a0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b0b0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b0c0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003 | 0003b0d0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | ||
| 0003 | 0003b0e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b0 | 0003b0f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b100:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b110:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b120:·7267·6574·3d22·2369·646d·3530·3938·2220··rget="#idm5098"· | ||
| 0003b04 | 0003b130:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b05 | 0003b140:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b06 | 0003b150:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0 | 0003b160:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b0 | 0003b170:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b180:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b0a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b0b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| Max diff block lines reached; 9569288/9597882 bytes (99.70%) of diff not shown. | |||
| Offset 115, 53 lines modified | Offset 115, 14 lines modified | ||
| 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····dnf·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 162 | ··package_facts: | 128 | ··package_facts: |
| Offset 190, 14 lines modified | Offset 151, 53 lines modified | ||
| 190 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 191 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 192 | ··-·low_complexity | 153 | ··-·low_complexity |
| 193 | ··-·low_disruption | 154 | ··-·low_disruption |
| 194 | ··-·medium_severity | 155 | ··-·medium_severity |
| 195 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 196 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····dnf·install·-y·"aide" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | include·install_aide | ||
| 181 | class·install_aide·{ | ||
| 182 | ··package·{·'aide': | ||
| 183 | ····ensure·=>·'installed', | ||
| 184 | ··} | ||
| 185 | } | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 202 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 203 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 221, 28 lines modified | Offset 221, 14 lines modified | ||
| 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 229 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 230 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 231 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 232 | ····dnf·install·-y·"aide" | ||
| 233 | fi | ||
| 234 | /usr/sbin/aide·--init | ||
| 235 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 236 | else | ||
| Max diff block lines reached; 1044839/1049892 bytes (99.52%) of diff not shown. | |||
| Offset 14735, 227 lines modified | Offset 14735, 227 lines modified | ||
| 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | ||
| 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00039950:·6d65·6469·6174·696f·6e20·4 | 00039950:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 00039960:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00039970:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039980:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039990:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000399a0:·7365·2220·6964·3d22·6964·6d38·3132·3622··se"·id="idm8126" | |||
| 000399b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000399c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000399d0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | |||
| 000399e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 000399f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039a00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039a10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039a20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039a30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039a40:·2223·6964·6d38·3132·3722·2074·6162·696e··"#idm8127"·tabin | |||
| 00039a50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039a60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039a70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039a80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039a90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039aa0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 00039 | 00039960:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 00039ac0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039ad0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039ae0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039af0:·6964·6d38·3132·3722·3e3c·7461·626c·6520··idm8127"><table· | |||
| 00039b00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039b10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039b20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039b30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039b40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039b50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039b60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039b70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039b80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039b90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039ba0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039bb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039bc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039bd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00039be0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039bf0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 00039c00:·5f64·6e66·2d61·7574·6f6d·6174·6963·0a0a··_dnf-automatic.. | |||
| 00039c10:·636c·6173·7320·696e·7374·616c·6c5f·646e··class·install_dn | |||
| 00039c20:·662d·6175·746f·6d61·7469·6320·7b0a·2020··f-automatic·{.·· | |||
| 00039c30:·7061·636b·6167·6520·7b20·2764·6e66·2d61··package·{·'dnf-a | |||
| 00039c40:·7574·6f6d·6174·6963·273a·0a20·2020·2065··utomatic':.····e | |||
| 00039c50:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 00039c60:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 00039c70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039c80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039c90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039ca0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039cb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039cc0:·2223·6964·6d38·3132·3822·2074·6162·696e··"#idm8128"·tabin | |||
| 00039cd0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039ce0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039cf0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039d00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039d10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039d20:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 00039d30:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00039 | 00039970:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00039 | 00039980:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00039 | 00039990:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00039 | 000399a0:·6d38·3132·3622·3e3c·7461·626c·6520·636c··m8126"><table·cl | ||
| 00039 | 000399b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 00039 | 000399c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 00039 | 000399d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 00039 | 000399e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 00039 | 000399f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 00039 | 00039a00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 00039 | 00039a10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 00039 | 00039a20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 00039 | 00039a30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00039 | 00039a40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 00039 | 00039a50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 00039 | 00039a60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 00039 | 00039a70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 00039 | 00039a80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 00039 | 00039a90:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 00039e70:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 00039e80:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 00039e90:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 00039ea0:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | |||
| 00039eb0:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 00039ec0:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | |||
| 00039ed0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | |||
| 00039ee0:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | |||
| 00039ef0:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | |||
| 00039f00:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | |||
| 00039f10:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | |||
| 00039 | 00039aa0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 00039ab0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 00039ac0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 00039ad0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 00039ae0:·746f·0a20·2074·6167·733a·0a20·202d·2065··to.··tags:.··-·e | |||
| 00039af0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039b00:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039b10:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039b20:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039b30:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039b40:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039b50:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039b60:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039b70:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 00039b80:·6520·646e·662d·6175·746f·6d61·7469·6320··e·dnf-automatic· | |||
| 00039b90:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 00039ba0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 00039bb0:·3a20·646e·662d·6175·746f·6d61·7469·630a··:·dnf-automatic. | |||
| 00039bc0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00039bd0:·6e74·0a20·2077·6865·6e3a·206e·6f74·2028··nt.··when:·not·( | |||
| 00039be0:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | |||
| 00039bf0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00039c00:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | |||
| 00039c10:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | |||
| 00039c20:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | |||
| 00039c30:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | |||
| 00039c40:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| Max diff block lines reached; 3341256/3371230 bytes (99.11%) of diff not shown. | |||
| Offset 83, 54 lines modified | Offset 83, 14 lines modified | ||
| 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ············suitable·for·automatic,·regular·execution. | 84 | ············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ··medium | 85 | Severity: ··medium |
| 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | [[packages]] | ||
| 92 | name·=·"dnf-automatic" | ||
| 93 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | include·install_dnf-automatic | ||
| 100 | class·install_dnf-automatic·{ | ||
| 101 | ··package·{·'dnf-automatic': | ||
| 102 | ····ensure·=>·'installed', | ||
| 103 | ··} | ||
| 104 | } | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 111 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 112 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 114 | ····dnf·install·-y·"dnf-automatic" | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·--add=dnf-automatic | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Gather·the·package·facts | 95 | -·name:·Gather·the·package·facts |
| 131 | ··package_facts: | 96 | ··package_facts: |
| Offset 154, 14 lines modified | Offset 114, 54 lines modified | ||
| 154 | ··tags: | 114 | ··tags: |
| 155 | ··-·enable_strategy | 115 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 116 | ··-·low_complexity |
| 157 | ··-·low_disruption | 117 | ··-·low_disruption |
| 158 | ··-·medium_severity | 118 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 119 | ··-·no_reboot_needed |
| 160 | ··-·package_dnf-automatic_installed | 120 | ··-·package_dnf-automatic_installed |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"dnf-automatic" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 132 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 133 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 134 | ····dnf·install·-y·"dnf-automatic" | ||
| 135 | fi | ||
| 136 | else | ||
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 138 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | include·install_dnf-automatic | ||
| 145 | class·install_dnf-automatic·{ | ||
| 146 | ··package·{·'dnf-automatic': | ||
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=dnf-automatic | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 164 | automatic.conf. | 159 | automatic.conf. |
| 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 160 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 161 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 162 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 306, 43 lines modified | Offset 306, 14 lines modified | ||
| 306 | ···························(a),·CM-11(b) | 306 | ···························(a),·CM-11(b) |
| 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·rpm·--quiet·-q·dnf;·then | ||
| 316 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 317 | #·adding·any·search·characters·to·the·config·file. | ||
| 318 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 319 | #·shellcheck·disable=SC2059 | ||
| 320 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| Max diff block lines reached; 209659/215817 bytes (97.15%) of diff not shown. | |||
| Offset 15141, 408 lines modified | Offset 15141, 408 lines modified | ||
| 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b2c0:·6 | 0003b2c0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b2d0:·613e | 0003b2d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b2e0:·3d | 0003b2e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b2f0:· | 0003b2f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b300:·646d | 0003b300:·3d22·6964·6d34·3736·3222·3e3c·7461·626c··="idm4762"><tabl | ||
| 0003b310:·6 | 0003b310:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b320:· | 0003b320:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b330:·6 | 0003b330:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b340:·6 | 0003b340:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b350:· | 0003b350:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b360:· | 0003b360:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b370:· | 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b380:·69 | 0003b380:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b390:· | 0003b390:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b3a0:·7 | 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b3b0:· | 0003b3b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b3c0:· | 0003b3c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b3d0:· | 0003b3d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b3e0:· | 0003b3e0:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b3f0:· | 0003b3f0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b400:· | 0003b400:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b410:· | 0003b410:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b420:· | 0003b420:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b430:· | 0003b430:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b440:· | 0003b440:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b450:·6 | 0003b450:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b460:· | 0003b460:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b470:· | 0003b470:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b480:· | 0003b480:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b490:·2 | 0003b490:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b4a0:· | 0003b4a0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b4b0:·20 | 0003b4b0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b4c0:· | 0003b4c0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b4d0:· | 0003b4d0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b4e0:· | 0003b4e0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b4f0:· | 0003b4f0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b500:· | 0003b500:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b510:· | 0003b510:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b520:· | 0003b520:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b530:· | 0003b530:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b540:· | 0003b540:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b550:·6 | 0003b550:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b560:· | 0003b560:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b570:· | 0003b570:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b580:· | 0003b580:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b590:·6 | 0003b590:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b5a0:· | 0003b5a0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b5b0:· | 0003b5b0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b5c0:· | 0003b5c0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b5d0:· | 0003b5d0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003b5e0:· | 0003b5e0:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003b5f0:·6 | 0003b5f0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·270a··nstall·command'. | ||
| 0003b600:·2 | 0003b600:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003b610:· | 0003b610:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003b620:· | 0003b620:·7265·696e·7374·616c·6c5f·636d·643a·2064··reinstall_cmd:·d | ||
| 0003b630:·6 | 0003b630:·6e66·2072·6569·6e73·7461·6c6c·202d·790a··nf·reinstall·-y. | ||
| 0003b640:· | 0003b640:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003b650:· | 0003b650:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003b660:· | 0003b660:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b670:·61 | 0003b670:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003b680:· | 0003b680:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003b690:· | 0003b690:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b6a0:· | 0003b6a0:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003b6b0:·6 | 0003b6b0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b6c0:· | 0003b6c0:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003b6d0:·74 | 0003b6d0:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003b6e0:· | 0003b6e0:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003b6f0:· | 0003b6f0:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b700:· | 0003b700:·2020·2020·290a·2020·2d20·616e·7369·626c······).··-·ansibl | ||
| 0003b710:· | 0003b710:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003b720:·6 | 0003b720:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003b730:·6 | 0003b730:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003b740:· | 0003b740:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003b750:· | 0003b750:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | ||
| 0003b760:· | 0003b760:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b770:· | 0003b770:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b780:· | 0003b780:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b790:· | 0003b790:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b7a0:· | 0003b7a0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b7b0:· | 0003b7b0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b7c0:· | 0003b7c0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b7d0:· | 0003b7d0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b7e0:·2 | 0003b7e0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b7f0:· | 0003b7f0:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b800:· | 0003b800:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b810:· | 0003b810:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b820:· | 0003b820:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b830:· | 0003b830:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b840:· | 0003b840:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b850:· | 0003b850:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b860:· | 0003b860:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b870:· | 0003b870:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003b880:·6d | 0003b880:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003b890:· | 0003b890:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003b8a0:· | 0003b8a0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003b8b0:· | 0003b8b0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003b8c0:· | 0003b8c0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003b8d0:· | 0003b8d0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b8e0:·3 | 0003b8e0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b8f0:· | 0003b8f0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b900:· | 0003b900:·616e·6420·287a·7970·7065·7229·270a·2020··and·(zypper)'.·· | ||
| 0003b910:· | 0003b910:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b920:· | 0003b920:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b930:· | 0003b930:·696e·7374·616c·6c5f·636d·643a·207a·7970··install_cmd:·zyp | ||
| 0003b940:· | 0003b940:·7065·7220·696e·202d·6620·2d79·0a20·2077··per·in·-f·-y.··w | ||
| 0003b950:· | 0003b950:·6865·6e3a·0a20·202d·206e·6f74·2028·2022··hen:.··-·not·(·" | ||
| 0003b960:· | 0003b960:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | ||
| 0003b970:·6 | 0003b970:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003b980:· | 0003b980:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | ||
| 0003b990:· | 0003b990:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | ||
| 0003b9a0:· | 0003b9a0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003b9b0:· | 0003b9b0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | ||
| 0003b9c0:· | 0003b9c0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003b9d0:· | 0003b9d0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | ||
| 0003b9e0:· | 0003b9e0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003b9f0:· | 0003b9f0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 0003ba00:·6 | 0003ba00:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003ba10:· | 0003ba10:·2029·0a20·202d·2061·6e73·6962·6c65·5f64···).··-·ansible_d | ||
| Max diff block lines reached; 6023001/6077953 bytes (99.10%) of diff not shown. | |||
| Offset 103, 33 lines modified | Offset 103, 14 lines modified | ||
| 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·Gather·the·package·facts | 115 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 116 | ··package_facts: |
| Offset 296, 14 lines modified | Offset 277, 33 lines modified | ||
| 296 | ··-·PCI-DSSv4-11.5.2 | 277 | ··-·PCI-DSSv4-11.5.2 |
| 297 | ··-·high_complexity | 278 | ··-·high_complexity |
| 298 | ··-·high_severity | 279 | ··-·high_severity |
| 299 | ··-·medium_disruption | 280 | ··-·medium_disruption |
| 300 | ··-·no_reboot_needed | 281 | ··-·no_reboot_needed |
| 301 | ··-·restrict_strategy | 282 | ··-·restrict_strategy |
| 302 | ··-·rpm_verify_hashes | 283 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 298 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 299 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 306 | run·the·following·command·to·determine·which·package·owns·it: | 300 | run·the·following·command·to·determine·which·package·owns·it: |
| 307 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 309 | $·sudo·rpm·--restore·PACKAGENAME | 303 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 322, 46 lines modified | Offset 322, 14 lines modified | ||
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 334 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 335 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 336 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 337 | declare·-A·SETPERMS_RPM_DICT | ||
| 338 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 339 | #·is·expected·by·the·RPM·database | ||
| 340 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 341 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 342 | do | ||
| 343 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 344 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 345 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 361 | -·name:·Gather·the·package·facts | 334 | -·name:·Gather·the·package·facts |
| 362 | ··package_facts: | 335 | ··package_facts: |
| Offset 469, 14 lines modified | Offset 437, 46 lines modified | ||
| 469 | ··-·PCI-DSSv4-11.5.2 | 437 | ··-·PCI-DSSv4-11.5.2 |
| 470 | ··-·high_complexity | 438 | ··-·high_complexity |
| 471 | ··-·high_severity | 439 | ··-·high_severity |
| 472 | ··-·medium_disruption | 440 | ··-·medium_disruption |
| 473 | ··-·no_reboot_needed | 441 | ··-·no_reboot_needed |
| 474 | ··-·restrict_strategy | 442 | ··-·restrict_strategy |
| 475 | ··-·rpm_verify_ownership | 443 | ··-·rpm_verify_ownership |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 637503/645214 bytes (98.80%) of diff not shown. | |||
| Offset 15167, 408 lines modified | Offset 15167, 408 lines modified | ||
| 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | ||
| 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b450:·5265·6d65·6469·6174·696f·6e20· | 0003b450:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b460:·6c20·736 | 0003b460:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b470:·3c62 | 0003b470:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b480:·7 | 0003b480:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b490:·6 | 0003b490:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b4a0:· | 0003b4a0:·6964·6d34·3736·3222·3e3c·7461·626c·6520··idm4762"><table· | ||
| 0003b4b0:· | 0003b4b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b4c0:· | 0003b4c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b4d0:· | 0003b4d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b4e0:· | 0003b4e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b4f0:·7 | 0003b4f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b500:· | 0003b500:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b510:· | 0003b510:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b520:·7 | 0003b520:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b530:·3 | 0003b530:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b540:· | 0003b540:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b550:· | 0003b550:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b560:·7 | 0003b560:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b570:· | 0003b570:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b580:·6 | 0003b580:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b590:· | 0003b590:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b5a0:· | 0003b5a0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003b5b0:· | 0003b5b0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003b5c0:·6 | 0003b5c0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003b5d0:· | 0003b5d0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003b5e0:·6 | 0003b5e0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003b5f0:· | 0003b5f0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b600:· | 0003b600:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b610:· | 0003b610:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b620:· | 0003b620:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b630:· | 0003b630:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b640:· | 0003b640:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b650:· | 0003b650:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b660:· | 0003b660:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b670:· | 0003b670:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b680:· | 0003b680:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b690:· | 0003b690:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b6a0:· | 0003b6a0:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003b6b0:· | 0003b6b0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003b6c0:·20 | 0003b6c0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003b6d0:· | 0003b6d0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003b6e0:· | 0003b6e0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003b6f0:·6 | 0003b6f0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003b700:·2 | 0003b700:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003b710:· | 0003b710:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003b720:· | 0003b720:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003b730:· | 0003b730:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003b740:· | 0003b740:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003b750:· | 0003b750:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003b760:·6 | 0003b760:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003b770:·2 | 0003b770:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b780:·6 | 0003b780:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b790:· | 0003b790:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b7a0:· | 0003b7a0:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b7b0:·6 | 0003b7b0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b7c0:· | 0003b7c0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b7d0:· | 0003b7d0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b7e0:· | 0003b7e0:·7768·656e·3a0a·2020·2d20·6e6f·7420·2820··when:.··-·not·(· | ||
| 0003b7f0:· | 0003b7f0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | ||
| 0003b800:·62 | 0003b800:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b810:·6 | 0003b810:·6573·2061·6e64·2022·7270·6d2d·6f73·7472··es·and·"rpm-ostr | ||
| 0003b820:· | 0003b820:·6565·2220·696e·2061·6e73·6962·6c65·5f66··ee"·in·ansible_f | ||
| 0003b830:· | 0003b830:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003b840:· | 0003b840:·2020·616e·6420·2262·6f6f·7463·2220·696e····and·"bootc"·in | ||
| 0003b850:· | 0003b850:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b860:·6 | 0003b860:·6163·6b61·6765·7320·616e·6420·6e6f·7420··ackages·and·not· | ||
| 0003b870:· | 0003b870:·226f·7065·6e73·6869·6674·2d6b·7562·656c··"openshift-kubel | ||
| 0003b880:·657 | 0003b880:·6574·2220·696e·2061·6e73·6962·6c65·5f66··et"·in·ansible_f | ||
| 0003b890:· | 0003b890:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003b8a0:· | 0003b8a0:·2020·290a·2020·2d20·616e·7369·626c·655f····).··-·ansible_ | ||
| 0003b8b0:· | 0003b8b0:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003b8c0:· | 0003b8c0:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003b8d0:·7 | 0003b8d0:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003b8e0:·22 | 0003b8e0:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003b8f0:·20 | 0003b8f0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003b900:· | 0003b900:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003b910:· | 0003b910:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003b920:· | 0003b920:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b930:·3 | 0003b930:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003b940:·2 | 0003b940:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003b950:· | 0003b950:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b960:· | 0003b960:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003b970:· | 0003b970:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003b980:· | 0003b980:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b990:· | 0003b990:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003b9a0:· | 0003b9a0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003b9b0:· | 0003b9b0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b9c0:· | 0003b9c0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003b9d0:· | 0003b9d0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003b9e0:· | 0003b9e0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003b9f0:· | 0003b9f0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003ba00:· | 0003ba00:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003ba10:· | 0003ba10:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003ba20:·6 | 0003ba20:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003ba30:·6 | 0003ba30:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003ba40:· | 0003ba40:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003ba50:· | 0003ba50:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003ba60:· | 0003ba60:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003ba70:· | 0003ba70:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003ba80:· | 0003ba80:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003ba90:· | 0003ba90:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003baa0:· | 0003baa0:·6420·287a·7970·7065·7229·270a·2020·7365··d·(zypper)'.··se | ||
| 0003bab0:· | 0003bab0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003bac0:· | 0003bac0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003bad0:· | 0003bad0:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | ||
| 0003bae0:·2 | 0003bae0:·7220·696e·202d·6620·2d79·0a20·2077·6865··r·in·-f·-y.··whe | ||
| 0003baf0:· | 0003baf0:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003bb00:· | 0003bb00:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003bb10:· | 0003bb10:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bb20:· | 0003bb20:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003bb30:· | 0003bb30:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bb40:· | 0003bb40:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003bb50:· | 0003bb50:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003bb60:·7 | 0003bb60:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bb70:·6 | 0003bb70:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003bb80:· | 0003bb80:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003bb90:· | 0003bb90:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bba0:· | 0003bba0:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003bbb0:· | 0003bbb0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| Max diff block lines reached; 18799503/18854455 bytes (99.71%) of diff not shown. | |||
| Offset 110, 33 lines modified | Offset 110, 14 lines modified | ||
| 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 119 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 135 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 123 | ··package_facts: |
| Offset 303, 14 lines modified | Offset 284, 33 lines modified | ||
| 303 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 304 | ··-·high_complexity | 285 | ··-·high_complexity |
| 305 | ··-·high_severity | 286 | ··-·high_severity |
| 306 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 307 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 308 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 309 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 305 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 312 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 306 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 313 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 307 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 331, 50 lines modified | Offset 331, 14 lines modified | ||
| 331 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 331 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 333 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 333 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 334 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 334 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 336 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 336 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 337 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 337 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 343 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 344 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 345 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 346 | declare·-A·SETPERMS_RPM_DICT | ||
| 347 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 348 | #·is·expected·by·the·RPM·database | ||
| 349 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 350 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 351 | do | ||
| 352 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 353 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 354 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 355 | ········do | ||
| 356 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 357 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 358 | ········done | ||
| 359 | done | ||
| 360 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 361 | #·correct·values | ||
| 362 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 363 | do | ||
| 364 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 365 | done | ||
| 366 | else | ||
| 367 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 368 | fi | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 374 | -·name:·Gather·the·package·facts | 343 | -·name:·Gather·the·package·facts |
| 375 | ··package_facts: | 344 | ··package_facts: |
| Offset 486, 14 lines modified | Offset 450, 50 lines modified | ||
| 486 | ··-·PCI-DSSv4-11.5.2 | 450 | ··-·PCI-DSSv4-11.5.2 |
| 487 | ··-·high_complexity | 451 | ··-·high_complexity |
| 488 | ··-·high_severity | 452 | ··-·high_severity |
| 489 | ··-·medium_disruption | 453 | ··-·medium_disruption |
| 490 | ··-·no_reboot_needed | 454 | ··-·no_reboot_needed |
| 491 | ··-·restrict_strategy | 455 | ··-·restrict_strategy |
| 492 | ··-·rpm_verify_permissions | 456 | ··-·rpm_verify_permissions |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1522368/1530452 bytes (99.47%) of diff not shown. | |||
| Offset 15179, 408 lines modified | Offset 15179, 408 lines modified | ||
| 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | ||
| 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b510:·6961·7469·6f6e·20 | 0003b510:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b520:·6970·7420 | 0003b520:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b530:·6469 | 0003b530:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b540:· | 0003b540:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b550:·7365 | 0003b550:·6c61·7073·6522·2069·643d·2269·646d·3437··lapse"·id="idm47 | ||
| 0003b560:·3 | 0003b560:·3632·223e·3c74·6162·6c65·2063·6c61·7373··62"><table·class | ||
| 0003b570:· | 0003b570:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b580:· | 0003b580:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b590:·6 | 0003b590:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b5a0:· | 0003b5a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b5b0:· | 0003b5b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b5c0:· | 0003b5c0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b5d0:· | 0003b5d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b5e0:· | 0003b5e0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b5f0:· | 0003b5f0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b600:· | 0003b600:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b610:·3 | 0003b610:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b620:· | 0003b620:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b630:· | 0003b630:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b640:· | 0003b640:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b650:·2 | 0003b650:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b660:· | 0003b660:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b670:·20 | 0003b670:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b680:·74 | 0003b680:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b690:· | 0003b690:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b6a0:· | 0003b6a0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b6b0:· | 0003b6b0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b6c0:· | 0003b6c0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b6d0:· | 0003b6d0:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003b6e0:· | 0003b6e0:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003b6f0:· | 0003b6f0:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003b700:·2d | 0003b700:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003b710:· | 0003b710:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003b720:· | 0003b720:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b730:· | 0003b730:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003b740:· | 0003b740:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003b750:· | 0003b750:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b760:· | 0003b760:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003b770:· | 0003b770:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003b780:· | 0003b780:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003b790:· | 0003b790:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003b7a0:·2 | 0003b7a0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003b7b0:·6 | 0003b7b0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003b7c0:· | 0003b7c0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003b7d0:· | 0003b7d0:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003b7e0:· | 0003b7e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003b7f0:·6 | 0003b7f0:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003b800:· | 0003b800:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003b810:· | 0003b810:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003b820:· | 0003b820:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003b830:·6 | 0003b830:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b840:·6 | 0003b840:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b850:· | 0003b850:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b860:·6 | 0003b860:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b870:· | 0003b870:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b880:·6 | 0003b880:·6c6c·5f63·6d64·3a20·646e·6620·7265·696e··ll_cmd:·dnf·rein | ||
| 0003b890:· | 0003b890:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b8a0:· | 0003b8a0:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003b8b0:·6 | 0003b8b0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003b8c0:· | 0003b8c0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003b8d0:·6 | 0003b8d0:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003b8e0:·6 | 0003b8e0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b8f0:·3 | 0003b8f0:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003b900:· | 0003b900:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003b910:· | 0003b910:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b920:·6 | 0003b920:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003b930:·7 | 0003b930:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003b940:· | 0003b940:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b950:· | 0003b950:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003b960:· | 0003b960:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| 0003b970:·6 | 0003b970:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b980:·6 | 0003b980:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b990:· | 0003b990:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b9a0:· | 0003b9a0:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b9b0:·733 | 0003b9b0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b9c0:· | 0003b9c0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b9d0:· | 0003b9d0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b9e0:· | 0003b9e0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b9f0:· | 0003b9f0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003ba00:· | 0003ba00:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003ba10:· | 0003ba10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003ba20:·6 | 0003ba20:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003ba30:· | 0003ba30:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003ba40:· | 0003ba40:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003ba80:· | 0003ba80:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003ba90:·3 | 0003ba90:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003baa0:· | 0003baa0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003bab0:· | 0003bab0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003bac0:· | 0003bac0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003bad0:· | 0003bad0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003bae0:· | 0003bae0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003baf0:· | 0003baf0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003bb00:· | 0003bb00:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003bb10:· | 0003bb10:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003bb20:· | 0003bb20:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003bb30:·2 | 0003bb30:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003bb40:· | 0003bb40:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003bb50:· | 0003bb50:·7461·6c6c·2063·6f6d·6d61·6e64·2028·7a79··tall·command·(zy | ||
| 0003bb60:· | 0003bb60:·7070·6572·2927·0a20·2073·6574·5f66·6163··pper)'.··set_fac | ||
| 0003bb70:· | 0003bb70:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003bb80:· | 0003bb80:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003bb90:· | 0003bb90:·5f63·6d64·3a20·7a79·7070·6572·2069·6e20··_cmd:·zypper·in· | ||
| 0003bba0:·2 | 0003bba0:·2d66·202d·790a·2020·7768·656e·3a0a·2020··-f·-y.··when:.·· | ||
| 0003bbb0:·2d | 0003bbb0:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003bbc0:· | 0003bbc0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bbd0:· | 0003bbd0:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003bbe0:· | 0003bbe0:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003bbf0:·6 | 0003bbf0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bc00:·6 | 0003bc00:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003bc10:·6 | 0003bc10:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003bc20:· | 0003bc20:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bc30:·6 | 0003bc30:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003bc40:·6 | 0003bc40:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003bc50:· | 0003bc50:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bc60:·6 | 0003bc60:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003bc70:· | 0003bc70:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| Max diff block lines reached; 10398562/10453514 bytes (99.47%) of diff not shown. | |||
| Offset 111, 33 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 124 | ··package_facts: |
| Offset 304, 14 lines modified | Offset 285, 33 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·high_complexity | 286 | ··-·high_complexity |
| 306 | ··-·high_severity | 287 | ··-·high_severity |
| 307 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 308 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 309 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 310 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 314 | run·the·following·command·to·determine·which·package·owns·it: | 308 | run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 309 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 317 | $·sudo·rpm·--restore·PACKAGENAME | 311 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 46 lines modified | Offset 330, 14 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 369 | -·name:·Gather·the·package·facts | 342 | -·name:·Gather·the·package·facts |
| 370 | ··package_facts: | 343 | ··package_facts: |
| Offset 477, 14 lines modified | Offset 445, 46 lines modified | ||
| 477 | ··-·PCI-DSSv4-11.5.2 | 445 | ··-·PCI-DSSv4-11.5.2 |
| 478 | ··-·high_complexity | 446 | ··-·high_complexity |
| 479 | ··-·high_severity | 447 | ··-·high_severity |
| 480 | ··-·medium_disruption | 448 | ··-·medium_disruption |
| 481 | ··-·no_reboot_needed | 449 | ··-·no_reboot_needed |
| 482 | ··-·restrict_strategy | 450 | ··-·restrict_strategy |
| 483 | ··-·rpm_verify_ownership | 451 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1009853/1017564 bytes (99.24%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | ||
| 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b520:·6e20· | 0003b520:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b530:·87b2 | 0003b530:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b540:·6c61 | 0003b540:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b550:·6 | 0003b550:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b560:·643d | 0003b560:·2220·6964·3d22·6964·6d34·3736·3222·3e3c··"·id="idm4762">< | ||
| 0003b570:· | 0003b570:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b580:· | 0003b580:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b590:· | 0003b590:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b5a0:· | 0003b5a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b5b0:· | 0003b5b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b5c0:· | 0003b5c0:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003b5d0:·6 | 0003b5d0:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003b5e0:· | 0003b5e0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b5f0:·7 | 0003b5f0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003b600:·6 | 0003b600:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b610:· | 0003b610:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b620:·6 | 0003b620:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b630:· | 0003b630:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b640:· | 0003b640:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003b650:· | 0003b650:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b660:· | 0003b660:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003b670:·6 | 0003b670:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003b680:· | 0003b680:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003b690:· | 0003b690:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003b6a0:· | 0003b6a0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003b6b0:· | 0003b6b0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b6c0:· | 0003b6c0:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b6d0:· | 0003b6d0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b6e0:· | 0003b6e0:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b6f0:·2 | 0003b6f0:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b700:· | 0003b700:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b710:· | 0003b710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b720:· | 0003b720:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b730:·5 | 0003b730:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b740:· | 0003b740:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b750:·2 | 0003b750:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b760:· | 0003b760:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b770:·2 | 0003b770:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b780:· | 0003b780:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b790:· | 0003b790:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b7a0:· | 0003b7a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b7b0:· | 0003b7b0:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b7c0:· | 0003b7c0:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b7d0:· | 0003b7d0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b7e0:· | 0003b7e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b7f0:· | 0003b7f0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b800:· | 0003b800:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003b810:· | 0003b810:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003b820:· | 0003b820:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003b830:·6 | 0003b830:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003b840:· | 0003b840:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003b850:·20 | 0003b850:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003b860:· | 0003b860:·6e64·270a·2020·7365·745f·6661·6374·3a0a··nd'.··set_fact:. | ||
| 0003b870:·2 | 0003b870:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003b880:·6 | 0003b880:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003b890:·6 | 0003b890:·643a·2064·6e66·2072·6569·6e73·7461·6c6c··d:·dnf·reinstall | ||
| 0003b8a0:·2 | 0003b8a0:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003b8b0:·6 | 0003b8b0:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003b8c0:· | 0003b8c0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b8d0:·7 | 0003b8d0:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003b8e0:·6 | 0003b8e0:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003b8f0:·6 | 0003b8f0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b900:· | 0003b900:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003b910:· | 0003b910:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003b920:· | 0003b920:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003b930:· | 0003b930:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003b940:· | 0003b940:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003b950:·6 | 0003b950:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b960:·6 | 0003b960:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003b970:· | 0003b970:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003b980:·6 | 0003b980:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003b990:· | 0003b990:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003b9a0:· | 0003b9a0:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003b9b0:· | 0003b9b0:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003b9c0:· | 0003b9c0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b9d0:· | 0003b9d0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b9e0:·2 | 0003b9e0:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003b9f0:· | 0003b9f0:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003ba00:· | 0003ba00:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003ba10:· | 0003ba10:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003ba20:·3 | 0003ba20:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003ba30:·2 | 0003ba30:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003ba40:· | 0003ba40:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003ba50:· | 0003ba50:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003ba60:· | 0003ba60:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003ba70:· | 0003ba70:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003ba80:·3 | 0003ba80:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003ba90:· | 0003ba90:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003baa0:· | 0003baa0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003bab0:· | 0003bab0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003bac0:· | 0003bac0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003bad0:· | 0003bad0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003bae0:· | 0003bae0:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003baf0:· | 0003baf0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003bb00:· | 0003bb00:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003bb10:· | 0003bb10:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003bb20:· | 0003bb20:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003bb30:· | 0003bb30:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003bb40:· | 0003bb40:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003bb50:· | 0003bb50:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003bb60:· | 0003bb60:·636f·6d6d·616e·6420·287a·7970·7065·7229··command·(zypper) | ||
| 0003bb70:· | 0003bb70:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003bb80:·2 | 0003bb80:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003bb90:· | 0003bb90:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003bba0:· | 0003bba0:·207a·7970·7065·7220·696e·202d·6620·2d79···zypper·in·-f·-y | ||
| 0003bbb0:· | 0003bbb0:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003bbc0:· | 0003bbc0:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003bbd0:· | 0003bbd0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bbe0:· | 0003bbe0:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003bbf0:· | 0003bbf0:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003bc00:· | 0003bc00:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bc10:· | 0003bc10:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003bc20:· | 0003bc20:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bc30:· | 0003bc30:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003bc40:·6 | 0003bc40:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| 0003bc50:· | 0003bc50:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | ||
| 0003bc60:· | 0003bc60:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bc70:·20 | 0003bc70:·0a20·2020·2029·0a20·202d·2061·6e73·6962··.····).··-·ansib | ||
| 0003bc80:· | 0003bc80:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| Max diff block lines reached; 10397801/10452753 bytes (99.47%) of diff not shown. | |||
| Offset 111, 33 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 124 | ··package_facts: |
| Offset 304, 14 lines modified | Offset 285, 33 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·high_complexity | 286 | ··-·high_complexity |
| 306 | ··-·high_severity | 287 | ··-·high_severity |
| 307 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 308 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 309 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 310 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 314 | run·the·following·command·to·determine·which·package·owns·it: | 308 | run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 309 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 317 | $·sudo·rpm·--restore·PACKAGENAME | 311 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 46 lines modified | Offset 330, 14 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 369 | -·name:·Gather·the·package·facts | 342 | -·name:·Gather·the·package·facts |
| 370 | ··package_facts: | 343 | ··package_facts: |
| Offset 477, 14 lines modified | Offset 445, 46 lines modified | ||
| 477 | ··-·PCI-DSSv4-11.5.2 | 445 | ··-·PCI-DSSv4-11.5.2 |
| 478 | ··-·high_complexity | 446 | ··-·high_complexity |
| 479 | ··-·high_severity | 447 | ··-·high_severity |
| 480 | ··-·medium_disruption | 448 | ··-·medium_disruption |
| 481 | ··-·no_reboot_needed | 449 | ··-·no_reboot_needed |
| 482 | ··-·restrict_strategy | 450 | ··-·restrict_strategy |
| 483 | ··-·rpm_verify_ownership | 451 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1009853/1017564 bytes (99.24%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b520:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b520:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b530:·6 | 0003b530:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b540:·613e | 0003b540:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b550:·3d | 0003b550:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b560:· | 0003b560:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b570:·646d | 0003b570:·3d22·6964·6d34·3736·3222·3e3c·7461·626c··="idm4762"><tabl | ||
| 0003b580:·6 | 0003b580:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b590:· | 0003b590:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b5a0:·6 | 0003b5a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b5b0:·6 | 0003b5b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b5c0:· | 0003b5c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b5d0:· | 0003b5d0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b5e0:· | 0003b5e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b5f0:·69 | 0003b5f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b600:· | 0003b600:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b610:·7 | 0003b610:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b620:· | 0003b620:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b630:· | 0003b630:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b640:· | 0003b640:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b650:· | 0003b650:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b660:· | 0003b660:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b670:· | 0003b670:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b680:· | 0003b680:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b690:· | 0003b690:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b6a0:· | 0003b6a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b6b0:· | 0003b6b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b6c0:·6 | 0003b6c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b6d0:· | 0003b6d0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b6e0:· | 0003b6e0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b6f0:· | 0003b6f0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b700:·2 | 0003b700:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b710:· | 0003b710:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b720:·20 | 0003b720:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b730:· | 0003b730:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b740:· | 0003b740:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b750:· | 0003b750:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b760:· | 0003b760:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b770:· | 0003b770:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b780:· | 0003b780:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b790:· | 0003b790:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b7a0:· | 0003b7a0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b7b0:· | 0003b7b0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b7c0:·6 | 0003b7c0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b7d0:· | 0003b7d0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b7e0:· | 0003b7e0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b7f0:· | 0003b7f0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b800:·6 | 0003b800:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b810:· | 0003b810:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b820:· | 0003b820:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b830:· | 0003b830:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b840:· | 0003b840:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003b850:· | 0003b850:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003b860:·6 | 0003b860:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·270a··nstall·command'. | ||
| 0003b870:·2 | 0003b870:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003b880:· | 0003b880:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003b890:· | 0003b890:·7265·696e·7374·616c·6c5f·636d·643a·2064··reinstall_cmd:·d | ||
| 0003b8a0:·6 | 0003b8a0:·6e66·2072·6569·6e73·7461·6c6c·202d·790a··nf·reinstall·-y. | ||
| 0003b8b0:· | 0003b8b0:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003b8c0:· | 0003b8c0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003b8d0:· | 0003b8d0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b8e0:·61 | 0003b8e0:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003b8f0:· | 0003b8f0:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003b900:· | 0003b900:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b910:· | 0003b910:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003b920:·6 | 0003b920:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b930:· | 0003b930:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003b940:·74 | 0003b940:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003b950:· | 0003b950:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003b960:· | 0003b960:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b970:· | 0003b970:·2020·2020·290a·2020·2d20·616e·7369·626c······).··-·ansibl | ||
| 0003b980:· | 0003b980:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003b990:·6 | 0003b990:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003b9a0:·6 | 0003b9a0:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003b9b0:· | 0003b9b0:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003b9c0:· | 0003b9c0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | ||
| 0003b9d0:· | 0003b9d0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b9e0:· | 0003b9e0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b9f0:· | 0003b9f0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003ba00:· | 0003ba00:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003ba10:· | 0003ba10:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003ba20:· | 0003ba20:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba30:· | 0003ba30:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003ba40:· | 0003ba40:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003ba50:·2 | 0003ba50:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba60:· | 0003ba60:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003ba70:· | 0003ba70:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003ba80:· | 0003ba80:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba90:· | 0003ba90:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003baa0:· | 0003baa0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003bab0:· | 0003bab0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003bac0:· | 0003bac0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003bad0:· | 0003bad0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003bae0:· | 0003bae0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003baf0:·6d | 0003baf0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003bb00:· | 0003bb00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003bb10:· | 0003bb10:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003bb20:· | 0003bb20:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003bb30:· | 0003bb30:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003bb40:· | 0003bb40:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003bb50:·3 | 0003bb50:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003bb60:· | 0003bb60:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003bb70:· | 0003bb70:·616e·6420·287a·7970·7065·7229·270a·2020··and·(zypper)'.·· | ||
| 0003bb80:· | 0003bb80:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003bb90:· | 0003bb90:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003bba0:· | 0003bba0:·696e·7374·616c·6c5f·636d·643a·207a·7970··install_cmd:·zyp | ||
| 0003bbb0:· | 0003bbb0:·7065·7220·696e·202d·6620·2d79·0a20·2077··per·in·-f·-y.··w | ||
| 0003bbc0:· | 0003bbc0:·6865·6e3a·0a20·202d·206e·6f74·2028·2022··hen:.··-·not·(·" | ||
| 0003bbd0:· | 0003bbd0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | ||
| 0003bbe0:·6 | 0003bbe0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003bbf0:· | 0003bbf0:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | ||
| 0003bc00:· | 0003bc00:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | ||
| 0003bc10:· | 0003bc10:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003bc20:· | 0003bc20:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | ||
| 0003bc30:· | 0003bc30:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bc40:· | 0003bc40:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | ||
| 0003bc50:· | 0003bc50:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003bc60:· | 0003bc60:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 0003bc70:·6 | 0003bc70:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003bc80:· | 0003bc80:·2029·0a20·202d·2061·6e73·6962·6c65·5f64···).··-·ansible_d | ||
| Max diff block lines reached; 10399181/10454133 bytes (99.47%) of diff not shown. | |||
| Offset 111, 33 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 124 | ··package_facts: |
| Offset 304, 14 lines modified | Offset 285, 33 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·high_complexity | 286 | ··-·high_complexity |
| 306 | ··-·high_severity | 287 | ··-·high_severity |
| 307 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 308 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 309 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 310 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 314 | run·the·following·command·to·determine·which·package·owns·it: | 308 | run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 309 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 317 | $·sudo·rpm·--restore·PACKAGENAME | 311 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 46 lines modified | Offset 330, 14 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 369 | -·name:·Gather·the·package·facts | 342 | -·name:·Gather·the·package·facts |
| 370 | ··package_facts: | 343 | ··package_facts: |
| Offset 477, 14 lines modified | Offset 445, 46 lines modified | ||
| 477 | ··-·PCI-DSSv4-11.5.2 | 445 | ··-·PCI-DSSv4-11.5.2 |
| 478 | ··-·high_complexity | 446 | ··-·high_complexity |
| 479 | ··-·high_severity | 447 | ··-·high_severity |
| 480 | ··-·medium_disruption | 448 | ··-·medium_disruption |
| 481 | ··-·no_reboot_needed | 449 | ··-·no_reboot_needed |
| 482 | ··-·restrict_strategy | 450 | ··-·restrict_strategy |
| 483 | ··-·rpm_verify_ownership | 451 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1009853/1017564 bytes (99.24%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | ||
| 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b460:·7469·6f6e·20 | 0003b460:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b470:·7420 | 0003b470:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b480:·7620 | 0003b480:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b490:·6 | 0003b490:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b4a0:·2220 | 0003b4a0:·7073·6522·2069·643d·2269·646d·3437·3632··pse"·id="idm4762 | ||
| 0003b4b0:· | 0003b4b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b4c0:· | 0003b4c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b4d0:·6 | 0003b4d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b4e0:· | 0003b4e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b4f0:·6 | 0003b4f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b500:· | 0003b500:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b510:· | 0003b510:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b520:·7 | 0003b520:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b530:· | 0003b530:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b540:·3 | 0003b540:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b550:· | 0003b550:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b560:· | 0003b560:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b570:· | 0003b570:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b580:·7 | 0003b580:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b590:· | 0003b590:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b5a0:·6 | 0003b5a0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b5b0:· | 0003b5b0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003b5c0:·6 | 0003b5c0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003b5d0:· | 0003b5d0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003b5e0:· | 0003b5e0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003b5f0:· | 0003b5f0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003b600:· | 0003b600:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003b610:·2 | 0003b610:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b620:· | 0003b620:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b630:·3 | 0003b630:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b640:· | 0003b640:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b650:·2 | 0003b650:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b660:· | 0003b660:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b670:· | 0003b670:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b680:· | 0003b680:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b690:· | 0003b690:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b6a0:· | 0003b6a0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b6b0:· | 0003b6b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b6c0:· | 0003b6c0:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003b6d0:·2 | 0003b6d0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003b6e0:· | 0003b6e0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003b6f0:· | 0003b6f0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003b700:·6 | 0003b700:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003b710:· | 0003b710:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003b720:·6 | 0003b720:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003b730:·2d | 0003b730:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003b740:·6 | 0003b740:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003b750:· | 0003b750:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003b760:· | 0003b760:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003b770:· | 0003b770:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003b780:·6 | 0003b780:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b790:· | 0003b790:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b7a0:· | 0003b7a0:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003b7b0:· | 0003b7b0:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b7c0:·6 | 0003b7c0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b7d0:· | 0003b7d0:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003b7e0:·6 | 0003b7e0:·616c·6c20·2d79·0a20·2077·6865·6e3a·0a20··all·-y.··when:.· | ||
| 0003b7f0:·2 | 0003b7f0:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003b800:· | 0003b800:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b810:· | 0003b810:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003b820:· | 0003b820:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003b830:·61 | 0003b830:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003b840:·36 | 0003b840:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003b850:· | 0003b850:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003b860:· | 0003b860:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b870:· | 0003b870:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003b880:· | 0003b880:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003b890:·6 | 0003b890:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003b8a0:·6 | 0003b8a0:·636b·6167·6573·0a20·2020·2029·0a20·202d··ckages.····).··- | ||
| 0003b8b0:· | 0003b8b0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003b8c0:· | 0003b8c0:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003b8d0:· | 0003b8d0:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003b8e0:· | 0003b8e0:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003b8f0:· | 0003b8f0:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003b900:· | 0003b900:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b910:· | 0003b910:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b920:· | 0003b920:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b930:· | 0003b930:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b940:· | 0003b940:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b950:· | 0003b950:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b960:· | 0003b960:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b970:· | 0003b970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b980:· | 0003b980:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b990:· | 0003b990:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b9a0:· | 0003b9a0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b9b0:· | 0003b9b0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b9c0:· | 0003b9c0:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b9d0:· | 0003b9d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b9e0:· | 0003b9e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b9f0:· | 0003b9f0:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003ba00:· | 0003ba00:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003ba10:· | 0003ba10:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003ba20:· | 0003ba20:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003ba30:·6 | 0003ba30:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003ba40:· | 0003ba40:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003ba50:· | 0003ba50:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003ba60:· | 0003ba60:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003ba70:· | 0003ba70:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003ba80:· | 0003ba80:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003ba90:· | 0003ba90:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003baa0:· | 0003baa0:·6c6c·2063·6f6d·6d61·6e64·2028·7a79·7070··ll·command·(zypp | ||
| 0003bab0:· | 0003bab0:·6572·2927·0a20·2073·6574·5f66·6163·743a··er)'.··set_fact: | ||
| 0003bac0:· | 0003bac0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003bad0:· | 0003bad0:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003bae0:· | 0003bae0:·6d64·3a20·7a79·7070·6572·2069·6e20·2d66··md:·zypper·in·-f | ||
| 0003baf0:·2 | 0003baf0:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003bb00:· | 0003bb00:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003bb10:· | 0003bb10:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bb20:· | 0003bb20:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003bb30:· | 0003bb30:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003bb40:· | 0003bb40:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bb50:· | 0003bb50:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003bb60:· | 0003bb60:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003bb70:· | 0003bb70:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003bb80:·6 | 0003bb80:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003bb90:· | 0003bb90:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003bba0:· | 0003bba0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bbb0:· | 0003bbb0:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003bbc0:· | 0003bbc0:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| Max diff block lines reached; 16149951/16204903 bytes (99.66%) of diff not shown. | |||
| Offset 15070, 218 lines modified | Offset 15070, 218 lines modified | ||
| 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | ||
| 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ae40:·3e52·656d·6564·6961·7469·6f6e·204 | 0003ae40:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003ae50:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003ae60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ae70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ae80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ae90:·2269·646d·3530·3937·223e·3c74·6162·6c65··"idm5097"><table | |||
| 0003aea0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aeb0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003aec0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003aed0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003aee0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003aef0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af00:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af10:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ae50:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003ae60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae90:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003aea0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003aeb0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003aec0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003aed0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003aee0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003aef0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003af00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003af10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003af20:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af30:·3039·3822·2074·6162·696e·6465·783d·2230··098"·tabindex="0 | |||
| 0003af40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003af50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003af60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003af70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003af80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003af90:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003afa0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afd0:·6170·7365·2220·6964·3d22·6964·6d35·3039··apse"·id="idm509 | |||
| 0003afe0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003aff0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b000:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b010:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b020:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b030:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003 | 0003af20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b050:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003 | 0003af30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003af40:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003af50:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003 | 0003af60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b090:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0d0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b0e0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003 | 0003af70:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003af80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003af90:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003afa0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003afb0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003afc0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003afd0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003afe0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003aff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b0b0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b0c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b | 0003b0d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003b110:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b120:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b | 0003b0e0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | ||
| 0003b0f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b100:·2077·6865·6e3a·2028·226b·6572·6e65·6c22···when:·("kernel" | |||
| 0003b110:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b120:·732e·7061·636b·6167·6573·206f·7220·226b··s.packages·or·"k | |||
| 0003b130:·6572·6e65·6c2d·7565·6b22·2069·6e20·616e··ernel-uek"·in·an | |||
| 0003b140:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b150:·6167·6573·290a·2020·7461·6773·3a0a·2020··ages).··tags:.·· | |||
| 0003b160:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b170:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b180:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b190:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b1a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b1b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b1c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b1d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b1e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b1f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b200:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b210:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b220:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b230:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b240:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b250:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b260:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b270:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b280:·3d22·2369·646d·3530·3938·2220·7461·6269··="#idm5098"·tabi | ||
| 0003b | 0003b290:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b2a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b2b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b | 0003b2c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b2d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b | 0003b2e0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b2f0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b300:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b310:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b320:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b330:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| Max diff block lines reached; 33002594/33031326 bytes (99.91%) of diff not shown. | |||
| Offset 15065, 218 lines modified | Offset 15065, 218 lines modified | ||
| 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | ||
| 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003ae00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ae10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae40:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ae50:·3039·3722·3e3c·7072·653e·3c63·6f64·653e··097"><pre><code> | |||
| 0003ae60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ae80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003aea0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003aeb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003aec0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003aed0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003aee0:·3530·3938·2220·7461·6269·6e64·6578·3d22··5098"·tabindex=" | |||
| 0003aef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003af40:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003af50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003af60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af80:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003af90:·3938·223e·3c74·6162·6c65·2063·6c61·7373··98"><table·class | |||
| 0003afa0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003afb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003afc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003afd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003afe0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aff0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b000:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b010:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b020:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b030:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b040:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b050:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b060:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b070:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b080:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b090:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b0a0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b0b0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b0c0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b0d0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b0e0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b0f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b100:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b110:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b120:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b130:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b140:·2223·6964·6d35·3039·3922·2074·6162·696e··"#idm5099"·tabin | |||
| 0003b150:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b160:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b170:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b180:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b190:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b1a0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b1b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b1c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1f0:·6d35·3039·3922·3e3c·7461·626c·6520·636c··m5099"><table·cl | |||
| 0003b200:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b210:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b220:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b230:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b240:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b250:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b260:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b270:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b280:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b290:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b2a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b2b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b2c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b2d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b2e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b2f0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b300:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b310:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b320:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003b330:·6965·7420·2d71·206b·6572·6e65·6c20·7c7c··iet·-q·kernel·|| | |||
| 0003b340:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003b350:·6b65·726e·656c·2d75·656b·3b20·7468·656e··kernel-uek;·then | |||
| 0003b360:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b370:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b380:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003b390:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b3a0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b3b0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b3c0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b3d0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b3e0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b3f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b400:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b410:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b420:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b430:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b440:·3d22·2369·646d·3531·3030·2220·7461·6269··="#idm5100"·tabi | |||
| 0003b450:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b460:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b470:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b480:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b490:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b4b0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003b4c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4f0:·643d·2269·646d·3531·3030·223e·3c74·6162··d="idm5100"><tab | |||
| 0003b500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b530:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b540:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b550:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| Max diff block lines reached; 32917565/32946297 bytes (99.91%) of diff not shown. | |||
| Offset 15059, 221 lines modified | Offset 15059, 221 lines modified | ||
| 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | ||
| 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ad90:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ada0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003adc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003add0:·2069·643d·2269·646d·3536·3531·223e·3c74···id="idm5651"><t | |||
| 0003ade0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003adf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae30:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae50:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ad90:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003ada0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003adb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003adc0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003add0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ade0:·646d·3536·3531·223e·3c70·7265·3e3c·636f··dm5651"><pre><co | |||
| 0003adf0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae00:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae10:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae20:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae30:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae40:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae50:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae60:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae70:·6964·6d35·3635·3222·2074·6162·696e·6465··idm5652"·tabinde | |||
| 0003ae80:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ae90:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aea0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aeb0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aec0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aed0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003aee0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003aef0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af20:·6d35·3635·3222·3e3c·7461·626c·6520·636c··m5652"><table·cl | |||
| 0003af30:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af40:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af50:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003af60:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003af70:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003ae60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003a | 0003ae70:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003ae80:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ae90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aea0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aeb0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003aec0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aed0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003aee0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003aef0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003af00:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003af10:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003af20:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003af30:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003af40:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 0003af50:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003af60:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003af70:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003af80:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003af90:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003afa0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003afb0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003afc0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003afd0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003afe0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003aff0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b000:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b010:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b020:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b030:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b040:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b050:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b060:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b070:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b080:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b090:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b0a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b0b0:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b0c0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b0d0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b0e0:·4c30·372d·3030·2d30·3230·3032·390a·2020··L07-00-020029.·· | |||
| 0003b0f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b100:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b110:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b120:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b130:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b140:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b150:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b160:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b170:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b180:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b190:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b1a0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b1b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b1c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b200:·2369·646d·3536·3532·2220·7461·6269·6e64··#idm5652"·tabind | |||
| 0003b210:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b220:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b230:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b240:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b250:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b260:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b270:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b280:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b290:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2b0:·6170·7365·2220·6964·3d22·6964·6d35·3635··apse"·id="idm565 | |||
| 0003b2c0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003b2d0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b2e0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b2f0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b300:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b310:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| Max diff block lines reached; 21436334/21465480 bytes (99.86%) of diff not shown. | |||
| Offset 15065, 221 lines modified | Offset 15065, 221 lines modified | ||
| 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | ||
| 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003adf0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ae00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ae10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ae20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ae30:·7365·2220·6964·3d22·6964·6d35·3635·3122··se"·id="idm5651" | |||
| 0003adf0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003ae00:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ae10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae40:·3d22·6964·6d35·3635·3122·3e3c·7072·653e··="idm5651"><pre> | |||
| 0003ae50:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ae60:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ae70:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ae80:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ae | 0003ae40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003ae50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ae60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ae70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ae80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ae90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003aea0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aeb0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003aea0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003aeb0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003aec0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003aed0:·3d22·2369·646d·3536·3532·2220·7461·6269··="#idm5652"·tabi | |||
| 0003aee0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003aef0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003af00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003af10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003af20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003af30:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003af40:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003af50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af80:·2269·646d·3536·3532·223e·3c74·6162·6c65··"idm5652"><table | |||
| 0003af90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003afa0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003afb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003afc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003afd0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a | 0003aec0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003a | 0003aed0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003aee0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003aef0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003af00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003af10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003af20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003af30:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003af40:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003af50:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003af60:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003af70:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003af80:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003af90:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003afa0:·5354·4947·2d4f·4c30·372d·3030·2d30·3230··STIG-OL07-00-020 | |||
| 0003afb0:·3032·390a·2020·2d20·4e49·5354·2d38·3030··029.··-·NIST-800 | |||
| 0003afc0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003afd0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003afe0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003aff0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b000:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b010:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b020:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b030:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b040:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b050:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b060:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b070:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b080:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b090:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0a0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0b0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0c0:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003b0d0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b0e0:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003b0f0:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003b100:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b110:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b120:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b130:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b140:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 0003b150:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b160:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b170:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b180:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b190:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b1a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b1b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b1c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b1d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b1e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b1f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b200:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b210:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b220:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b230:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b240:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b250:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b260:·743d·2223·6964·6d35·3635·3222·2074·6162··t="#idm5652"·tab | |||
| 0003b270:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b280:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b290:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b2d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b2e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b300:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b310:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b320:·3536·3532·223e·3c70·7265·3e3c·636f·6465··5652"><pre><code | |||
| 0003b330:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b340:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b350:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b360:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b370:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b380:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 21774262/21803408 bytes (99.87%) of diff not shown. | |||
| Offset 15050, 221 lines modified | Offset 15050, 221 lines modified | ||
| 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | ||
| 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ad00:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ad10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ad20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ad30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ad40:·2220·6964·3d22·6964·6d35·3635·3122·3e3c··"·id="idm5651">< | |||
| 0003ad50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ad60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ad70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003ad80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003ad90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ada0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003adb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003adc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ad00:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003ad10:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003ad20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ad30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ad40:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ad50:·6964·6d35·3635·3122·3e3c·7072·653e·3c63··idm5651"><pre><c | |||
| 0003ad60:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003ad70:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003ad80:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003ad90:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ada0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003adb0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003adc0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ade0:·2369·646d·3536·3532·2220·7461·6269·6e64··#idm5652"·tabind | |||
| 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae40:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003ae50:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003ae60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae90:·646d·3536·3532·223e·3c74·6162·6c65·2063··dm5652"><table·c | |||
| 0003aea0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aeb0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aec0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aed0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003aee0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a | 0003add0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a | 0003ade0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003adf0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ae00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ae10:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ae20:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003ae30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ae40:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003ae50:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003ae60:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003ae70:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003ae80:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003ae90:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003aea0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003aeb0:·4947·2d4f·4c30·372d·3030·2d30·3230·3032··IG-OL07-00-02002 | |||
| 0003aec0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003aed0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003aee0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003af00:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003af10:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003af20:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003af30:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003af40:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003af50:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003af60:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003af70:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003af80:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af90:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003afa0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003afb0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003afc0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003afd0:·0a20·2077·6865·6e3a·2028·226b·6572·6e65··.··when:·("kerne | |||
| 0003afe0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003aff0:·6374·732e·7061·636b·6167·6573·206f·7220··cts.packages·or· | |||
| 0003b000:·226b·6572·6e65·6c2d·7565·6b22·2069·6e20··"kernel-uek"·in· | |||
| 0003b010:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b020:·636b·6167·6573·290a·2020·7461·6773·3a0a··ckages).··tags:. | |||
| 0003b030:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b040:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b050:·4f4c·3037·2d30·302d·3032·3030·3239·0a20··OL07-00-020029.· | |||
| 0003b060:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b070:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b080:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b090:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b0a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b0b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b0c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b0d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b0e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b0f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b100:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b110:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b120:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b130:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b140:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b150:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b170:·2223·6964·6d35·3635·3222·2074·6162·696e··"#idm5652"·tabin | |||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b1e0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b1f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b200:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b210:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b220:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003b230:·3532·223e·3c70·7265·3e3c·636f·6465·3e0a··52"><pre><code>. | |||
| 0003b240:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b250:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b260:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b270:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b280:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| Max diff block lines reached; 9698257/9727403 bytes (99.70%) of diff not shown. | |||
| Offset 114, 53 lines modified | Offset 114, 14 lines modified | ||
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····yum·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 127 | ··package_facts: |
| Offset 191, 14 lines modified | Offset 152, 53 lines modified | ||
| 191 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 192 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 193 | ··-·low_complexity | 154 | ··-·low_complexity |
| 194 | ··-·low_disruption | 155 | ··-·low_disruption |
| 195 | ··-·medium_severity | 156 | ··-·medium_severity |
| 196 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 197 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 169 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 171 | ····yum·install·-y·"aide" | ||
| 172 | fi | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 28 lines modified | Offset 224, 14 lines modified | ||
| 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 234 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 235 | ····yum·install·-y·"aide" | ||
| 236 | fi | ||
| 237 | /usr/sbin/aide·--init | ||
| 238 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 239 | else | ||
| Max diff block lines reached; 1037905/1042916 bytes (99.52%) of diff not shown. | |||
| Offset 14918, 205 lines modified | Offset 14918, 205 lines modified | ||
| 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | ||
| 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003a4d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a4e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a4f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a500:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a510:·643d·2269·646d·3130·3332·3622·3e3c·7461··d="idm10326"><ta | |||
| 0003a520:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a530:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a540:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a550:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a560:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a570:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a4d0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003a4e0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a4f0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a500:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a510:·6964·6d31·3033·3236·223e·3c70·7265·3e3c··idm10326"><pre>< | |||
| 0003a520:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003a530:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003a540:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003a550:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003a560:·6d20·2d2d·7175·6965·7420·2d71·2079·756d··m·--quiet·-q·yum | |||
| 0003a570:·3b20·7468·656e·0a0a·2320·5374·7269·7020··;·then..#·Strip· | |||
| 0003a580:·616e·7920·7365·6172·6368·2063·6861·7261··any·search·chara | |||
| 0003a590:·6374·6572·7320·696e·2074·6865·206b·6579··cters·in·the·key | |||
| 0003a5a0:·2061·7267·2073·6f20·7468·6174·2074·6865···arg·so·that·the | |||
| 0003a5b0:·206b·6579·2063·616e·2062·6520·7265·706c···key·can·be·repl | |||
| 0003a5c0:·6163·6564·2077·6974·686f·7574·0a23·2061··aced·without.#·a | |||
| 0003a5d0:·6464·696e·6720·616e·7920·7365·6172·6368··dding·any·search | |||
| 0003a5e0:·2063·6861·7261·6374·6572·7320·746f·2074···characters·to·t | |||
| 0003a5f0:·6865·2063·6f6e·6669·6720·6669·6c65·2e0a··he·config·file.. | |||
| 0003a600:·7374·7269·7070·6564·5f6b·6579·3d24·2873··stripped_key=$(s | |||
| 0003a610:·6564·2027·732f·5b5c·5e3d·5c24·2c3b·2b5d··ed·'s/[\^=\$,;+] | |||
| 0003a620:·2a2f·2f67·2720·266c·743b·266c·743b·266c··*//g'·<<&l | |||
| 0003a630:·743b·2022·5e67·7067·6368·6563·6b22·290a··t;·"^gpgcheck"). | |||
| 0003a640:·0a23·2073·6865·6c6c·6368·6563·6b20·6469··.#·shellcheck·di | |||
| 0003a650:·7361·626c·653d·5343·3230·3539·0a70·7269··sable=SC2059.pri | |||
| 0003a660:·6e74·6620·2d76·2066·6f72·6d61·7474·6564··ntf·-v·formatted | |||
| 0003a670:·5f6f·7574·7075·7420·2225·7320·3d20·2573··_output·"%s·=·%s | |||
| 0003a680:·2220·2224·7374·7269·7070·6564·5f6b·6579··"·"$stripped_key | |||
| 0003a690:·2220·2231·220a·0a23·2049·6620·7468·6520··"·"1"..#·If·the· | |||
| 0003a6a0:·6b65·7920·6578·6973·7473·2c20·6368·616e··key·exists,·chan | |||
| 0003a6b0:·6765·2069·742e·204f·7468·6572·7769·7365··ge·it.·Otherwise | |||
| 0003a6c0:·2c20·6164·6420·6974·2074·6f20·7468·6520··,·add·it·to·the· | |||
| 0003a6d0:·636f·6e66·6967·5f66·696c·652e·0a23·2057··config_file..#·W | |||
| 0003a6e0:·6520·7365·6172·6368·2066·6f72·2074·6865··e·search·for·the | |||
| 0003a6f0:·206b·6579·2073·7472·696e·6720·666f·6c6c···key·string·foll | |||
| 0003a700:·6f77·6564·2062·7920·6120·776f·7264·2062··owed·by·a·word·b | |||
| 0003a710:·6f75·6e64·6172·7920·286d·6174·6368·6564··oundary·(matched | |||
| 0003a720:·2062·7920·5c26·6774·3b29·2c0a·2320·736f···by·\>),.#·so | |||
| 0003a730:·2069·6620·7765·2073·6561·7263·6820·666f···if·we·search·fo | |||
| 0003a740:·7220·2773·6574·7469·6e67·272c·2027·7365··r·'setting',·'se | |||
| 0003a750:·7474·696e·6732·2720·776f·6e27·7420·6d61··tting2'·won't·ma | |||
| 0003a760:·7463·682e·0a69·6620·4c43·5f41·4c4c·3d43··tch..if·LC_ALL=C | |||
| 0003a770:·2067·7265·7020·2d71·202d·6d20·3120·2d69···grep·-q·-m·1·-i | |||
| 0003a780:·202d·6520·225e·6770·6763·6865·636b·5c5c···-e·"^gpgcheck\\ | |||
| 0003a790:·2667·743b·2220·222f·6574·632f·7975·6d2e··>"·"/etc/yum. | |||
| 0003a7a0:·636f·6e66·223b·2074·6865·6e0a·2020·2020··conf";·then.···· | |||
| 0003a7b0:·6573·6361·7065·645f·666f·726d·6174·7465··escaped_formatte | |||
| 0003a7c0:·645f·6f75·7470·7574·3d24·2873·6564·202d··d_output=$(sed·- | |||
| 0003a7d0:·6520·2773·7c2f·7c5c·5c2f·7c67·2720·266c··e·'s|/|\\/|g'·&l | |||
| 0003a7e0:·743b·266c·743b·266c·743b·2022·2466·6f72··t;<<·"$for | |||
| 0003a7f0:·6d61·7474·6564·5f6f·7574·7075·7422·290a··matted_output"). | |||
| 0003a800:·2020·2020·4c43·5f41·4c4c·3d43·2073·6564······LC_ALL=C·sed | |||
| 0003a810:·202d·6920·2d2d·666f·6c6c·6f77·2d73·796d···-i·--follow-sym | |||
| 0003a820:·6c69·6e6b·7320·2273·2f5e·6770·6763·6865··links·"s/^gpgche | |||
| 0003a830:·636b·5c5c·2667·743b·2e2a·2f24·6573·6361··ck\\>.*/$esca | |||
| 0003a840:·7065·645f·666f·726d·6174·7465·645f·6f75··ped_formatted_ou | |||
| 0003a850:·7470·7574·2f67·6922·2022·2f65·7463·2f79··tput/gi"·"/etc/y | |||
| 0003a860:·756d·2e63·6f6e·6622·0a65·6c73·650a·2020··um.conf".else.·· | |||
| 0003a870:·2020·6966·205b·5b20·2d73·2022·2f65·7463····if·[[·-s·"/etc | |||
| 0003a880:·2f79·756d·2e63·6f6e·6622·205d·5d20·2661··/yum.conf"·]]·&a | |||
| 0003a890:·6d70·3b26·616d·703b·205b·5b20·2d6e·2022··mp;&·[[·-n·" | |||
| 0003a8a0:·2428·7461·696c·202d·6320·3120·2d2d·2022··$(tail·-c·1·--·" | |||
| 0003a8b0:·2f65·7463·2f79·756d·2e63·6f6e·6622·207c··/etc/yum.conf"·| | |||
| 0003a8c0:·7c20·7472·7565·2922·205d·5d3b·2074·6865··|·true)"·]];·the | |||
| 0003a8d0:·6e0a·2020·2020·2020·2020·4c43·5f41·4c4c··n.········LC_ALL | |||
| 0003a8e0:·3d43·2073·6564·202d·6920·2d2d·666f·6c6c··=C·sed·-i·--foll | |||
| 0003a8f0:·6f77·2d73·796d·6c69·6e6b·7320·2724·6127··ow-symlinks·'$a' | |||
| 0003a900:·5c5c·2022·2f65·7463·2f79·756d·2e63·6f6e··\\·"/etc/yum.con | |||
| 0003a910:·6622·0a20·2020·2066·690a·2020·2020·7072··f".····fi.····pr | |||
| 0003a920:·696e·7466·2027·2573·5c6e·2720·2224·666f··intf·'%s\n'·"$fo | |||
| 0003a930:·726d·6174·7465·645f·6f75·7470·7574·2220··rmatted_output"· | |||
| 0003a940:·2667·743b·2667·743b·2022·2f65·7463·2f79··>>·"/etc/y | |||
| 0003a950:·756d·2e63·6f6e·6622·0a66·690a·0a65·6c73··um.conf".fi..els | |||
| 0003a960:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003a970:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003a980:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003a990:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003a9a0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003a9b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003a9c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a9d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a9e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003a9f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aa00:·6d31·3033·3237·2220·7461·6269·6e64·6578··m10327"·tabindex | |||
| 0003aa10:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003aa20:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003aa30:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003aa40:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003aa50:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003aa60:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003aa70:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003aa80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aa90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aaa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aab0:·6d31·3033·3237·223e·3c74·6162·6c65·2063··m10327"><table·c | |||
| 0003aac0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aad0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aae0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aaf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ab00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ab10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ab20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ab30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ab40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ab50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ab60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a | 0003a580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ab80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| Max diff block lines reached; 3488116/3515054 bytes (99.23%) of diff not shown. | |||
| Offset 111, 42 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 |
| 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·rpm·--quiet·-q·yum;·then | ||
| 121 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 122 | #·adding·any·search·characters·to·the·config·file. | ||
| 123 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 124 | #·shellcheck·disable=SC2059 | ||
| 125 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 126 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 127 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 128 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 129 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 130 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 131 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 132 | yum.conf" | ||
| 133 | else | ||
| 134 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 135 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 136 | ····fi | ||
| 137 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 147 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 124 | ··package_facts: |
| Offset 201, 14 lines modified | Offset 173, 42 lines modified | ||
| 201 | ··-·PCI-DSSv4-6.3.3 | 173 | ··-·PCI-DSSv4-6.3.3 |
| 202 | ··-·configure_strategy | 174 | ··-·configure_strategy |
| 203 | ··-·ensure_gpgcheck_globally_activated | 175 | ··-·ensure_gpgcheck_globally_activated |
| 204 | ··-·high_severity | 176 | ··-·high_severity |
| 205 | ··-·low_complexity | 177 | ··-·low_complexity |
| 206 | ··-·medium_disruption | 178 | ··-·medium_disruption |
| 207 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·yum;·then | ||
| 183 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 184 | #·adding·any·search·characters·to·the·config·file. | ||
| 185 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 186 | #·shellcheck·disable=SC2059 | ||
| 187 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 188 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 189 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 190 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 191 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 192 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 193 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 194 | yum.conf" | ||
| 195 | else | ||
| 196 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 197 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 198 | ····fi | ||
| 199 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 200 | fi | ||
| 201 | else | ||
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 203 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. | 205 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. |
| 210 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ | 206 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ |
| 211 | etc/yum.conf. | 207 | etc/yum.conf. |
| 212 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall | 208 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall |
| 213 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not | 209 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not |
| 214 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. | 210 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. |
| Offset 230, 42 lines modified | Offset 230, 14 lines modified | ||
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 |
| 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule | 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·yum;·then | ||
| 240 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 241 | #·adding·any·search·characters·to·the·config·file. | ||
| 242 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^localpkg_gpgcheck") | ||
| 243 | #·shellcheck·disable=SC2059 | ||
| 244 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 245 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 246 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 247 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 248 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^localpkg_gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 249 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 250 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^localpkg_gpgcheck\\>.*/$escaped_formatted_output/ | ||
| 251 | gi"·"/etc/yum.conf" | ||
| 252 | else | ||
| 253 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 254 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 255 | ····fi | ||
| 256 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 257 | fi | ||
| 258 | else | ||
| 259 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 260 | fi | ||
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 262 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 263 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 264 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 265 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown |
| 266 | -·name:·Gather·the·package·facts | 242 | -·name:·Gather·the·package·facts |
| Max diff block lines reached; 228713/234694 bytes (97.45%) of diff not shown. | |||
| Offset 15122, 419 lines modified | Offset 15122, 419 lines modified | ||
| 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | ||
| 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b180:·6174·696f·6e20· | 0003b180:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b190:·707 | 0003b190:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b1a0:·6976 | 0003b1a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b1b0:·6 | 0003b1b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b1c0:·65 | 0003b1c0:·6170·7365·2220·6964·3d22·6964·6d35·3331··apse"·id="idm531 | ||
| 0003b1d0:·3 | 0003b1d0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | ||
| 0003b1e0:· | 0003b1e0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b1f0:·69 | 0003b1f0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b200:·65 | 0003b200:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b210:· | 0003b210:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b220:·7 | 0003b220:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b230:·3 | 0003b230:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b240:·7 | 0003b240:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b250:· | 0003b250:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b260:· | 0003b260:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b270:·7 | 0003b270:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b280:·7 | 0003b280:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b290:· | 0003b290:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b2a0:·6 | 0003b2a0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b2b0:·7 | 0003b2b0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b2c0:· | 0003b2c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b2d0:· | 0003b2d0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003b2e0:· | 0003b2e0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003b2f0:· | 0003b2f0:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003b300:· | 0003b300:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003b310:· | 0003b310:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003b320:· | 0003b320:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b330:· | 0003b330:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 0003b340:· | 0003b340:·372d·3030·2d30·3130·3032·300a·2020·2d20··7-00-010020.··-· | ||
| 0003b350:· | 0003b350:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b360:· | 0003b360:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b370:· | 0003b370:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b380:· | 0003b380:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b390:· | 0003b390:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b3a0:· | 0003b3a0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b3b0:· | 0003b3b0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b3c0:·2 | 0003b3c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b3d0:· | 0003b3d0:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b3e0:· | 0003b3e0:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b3f0:· | 0003b3f0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b400:· | 0003b400:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b410:· | 0003b410:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b420:· | 0003b420:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b430:· | 0003b430:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b440:·7 | 0003b440:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b450:· | 0003b450:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003b460:· | 0003b460:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003b470:· | 0003b470:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003b480:· | 0003b480:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003b490:· | 0003b490:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003b4a0:· | 0003b4a0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003b4b0:·6 | 0003b4b0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b4c0:· | 0003b4c0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b4d0:· | 0003b4d0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b4e0:· | 0003b4e0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b4f0:· | 0003b4f0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b500:·6 | 0003b500:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b510:·3 | 0003b510:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | ||
| 0003b520:·6c | 0003b520:·6c20·2d79·0a20·2077·6865·6e3a·0a20·202d··l·-y.··when:.··- | ||
| 0003b530:· | 0003b530:·206e·6f74·2028·2022·6b65·726e·656c·2220···not·(·"kernel"· | ||
| 0003b540:·6 | 0003b540:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b550:· | 0003b550:·2e70·6163·6b61·6765·7320·616e·6420·2272··.packages·and·"r | ||
| 0003b560:· | 0003b560:·706d·2d6f·7374·7265·6522·2069·6e20·616e··pm-ostree"·in·an | ||
| 0003b570:· | 0003b570:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b580:·61 | 0003b580:·6167·6573·0a20·2020·2061·6e64·2022·626f··ages.····and·"bo | ||
| 0003b590:·6 | 0003b590:·6f74·6322·2069·6e20·616e·7369·626c·655f··otc"·in·ansible_ | ||
| 0003b5a0:·6 | 0003b5a0:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003b5b0:· | 0003b5b0:·6e64·206e·6f74·2022·6f70·656e·7368·6966··nd·not·"openshif | ||
| 0003b5c0:· | 0003b5c0:·742d·6b75·6265·6c65·7422·2069·6e20·616e··t-kubelet"·in·an | ||
| 0003b5d0:· | 0003b5d0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b5e0:· | 0003b5e0:·6167·6573·0a20·2020·2029·0a20·202d·2061··ages.····).··-·a | ||
| 0003b5f0:·6e | 0003b5f0:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003b600:·6 | 0003b600:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003b610:· | 0003b610:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003b620:· | 0003b620:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003b630:·7 | 0003b630:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003b640:· | 0003b640:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b650:· | 0003b650:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 0003b660:· | 0003b660:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | ||
| 0003b670:· | 0003b670:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b680:· | 0003b680:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b690:· | 0003b690:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b6a0:· | 0003b6a0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b6b0:· | 0003b6b0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b6c0:· | 0003b6c0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b6d0:· | 0003b6d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b6e0:· | 0003b6e0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b6f0:· | 0003b6f0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b700:· | 0003b700:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b710:· | 0003b710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b720:·2 | 0003b720:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003b730:· | 0003b730:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003b740:· | 0003b740:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003b750:·2 | 0003b750:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003b760:· | 0003b760:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003b770:· | 0003b770:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003b780:· | 0003b780:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003b790:·20 | 0003b790:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003b7a0:· | 0003b7a0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003b7b0:· | 0003b7b0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003b7c0:· | 0003b7c0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003b7d0:· | 0003b7d0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003b7e0:· | 0003b7e0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b7f0:· | 0003b7f0:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b800:·6 | 0003b800:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003b810:· | 0003b810:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003b820:· | 0003b820:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003b830:· | 0003b830:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003b840:· | 0003b840:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003b850:· | 0003b850:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b860:·20 | 0003b860:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b870:· | 0003b870:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b880:·6 | 0003b880:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b890:· | 0003b890:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b8a0:· | 0003b8a0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b8b0:·2 | 0003b8b0:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b8c0:·6 | 0003b8c0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b8d0:·7 | 0003b8d0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003b8e0:· | 0003b8e0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| Max diff block lines reached; 8837832/8894302 bytes (99.37%) of diff not shown. | |||
| Offset 98, 33 lines modified | Offset 98, 14 lines modified | ||
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 107 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 108 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 109 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 110 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 111 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 112 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 113 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 114 | fi | ||
| 115 | else | ||
| 116 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 117 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 110 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 111 | ··package_facts: |
| Offset 297, 14 lines modified | Offset 278, 33 lines modified | ||
| 297 | ··-·PCI-DSSv4-11.5.2 | 278 | ··-·PCI-DSSv4-11.5.2 |
| 298 | ··-·high_complexity | 279 | ··-·high_complexity |
| 299 | ··-·high_severity | 280 | ··-·high_severity |
| 300 | ··-·medium_disruption | 281 | ··-·medium_disruption |
| 301 | ··-·no_reboot_needed | 282 | ··-·no_reboot_needed |
| 302 | ··-·restrict_strategy | 283 | ··-·restrict_strategy |
| 303 | ··-·rpm_verify_hashes | 284 | ··-·rpm_verify_hashes |
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 286 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 287 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 288 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 289 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 290 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 291 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 292 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 293 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 294 | fi | ||
| 295 | else | ||
| 296 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 297 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 299 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 306 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 300 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 307 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 301 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 302 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 303 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 327, 50 lines modified | Offset 327, 14 lines modified | ||
| 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 339 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 340 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 341 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 342 | declare·-A·SETPERMS_RPM_DICT | ||
| 343 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 344 | #·is·expected·by·the·RPM·database | ||
| 345 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 346 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 347 | do | ||
| 348 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 349 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 350 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 351 | ········do | ||
| 352 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | ········done | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 370 | -·name:·Gather·the·package·facts | 339 | -·name:·Gather·the·package·facts |
| 371 | ··package_facts: | 340 | ··package_facts: |
| Offset 486, 14 lines modified | Offset 450, 50 lines modified | ||
| 486 | ··-·PCI-DSSv4-11.5.2 | 450 | ··-·PCI-DSSv4-11.5.2 |
| 487 | ··-·high_complexity | 451 | ··-·high_complexity |
| 488 | ··-·high_severity | 452 | ··-·high_severity |
| 489 | ··-·medium_disruption | 453 | ··-·medium_disruption |
| 490 | ··-·no_reboot_needed | 454 | ··-·no_reboot_needed |
| 491 | ··-·restrict_strategy | 455 | ··-·restrict_strategy |
| 492 | ··-·rpm_verify_permissions | 456 | ··-·rpm_verify_permissions |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 868203/875773 bytes (99.14%) of diff not shown. | |||
| Offset 15071, 246 lines modified | Offset 15071, 246 lines modified | ||
| 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ae50:·656d·6564·6961·7469·6f6e·204 | 0003ae50:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003ae60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ae70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aea0:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | |||
| 0003aeb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003aec0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003aed0:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003aee0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003aef0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af00:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af10:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af20:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003af30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003af40:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003af50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003af60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003af70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003af80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003af90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afa0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003a | 0003ae60:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003a | 0003ae70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003a | 0003ae80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003a | 0003ae90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003a | 0003aea0:·646d·3631·3833·223e·3c74·6162·6c65·2063··dm6183"><table·c | ||
| 0003 | 0003aeb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003aec0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003aed0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003aee0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003 | 0003aef0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003 | 0003af00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003af10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003 | 0003af20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003af30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003 | 0003af40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003 | 0003af50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003 | 0003af60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003af70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003 | 0003af80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003 | 0003af90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b0f0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b100:·6472·6163·7574·2d66·6970·730a·0a63·6c61··dracut-fips..cla | |||
| 0003b110:·7373·2069·6e73·7461·6c6c·5f64·7261·6375··ss·install_dracu | |||
| 0003 | 0003afa0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003afb0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003afc0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003afd0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003afe0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aff0:·434a·4953·2d35·2e31·302e·312e·320a·2020··CJIS-5.10.1.2.·· | |||
| 0003b000:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b010:·2e31·332e·3131·0a20·202d·204e·4953·542d··.13.11.··-·NIST- | |||
| 0003b020:·3830·302d·3137·312d·332e·3133·2e38·0a20··800-171-3.13.8.· | |||
| 0003b030:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b040:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003b050:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | |||
| 0003b060:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b070:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003b080:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003b090:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003b0a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003b0b0:·2d35·332d·5343·2d31·330a·2020·2d20·656e··-53-SC-13.··-·en | |||
| 0003b0c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b0d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b0e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b0f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b100:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b110:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b120:·2070·6163·6b61·6765·5f64·7261·6375·742d···package_dracut- | |||
| 0003b130:·6669·7073·5f69·6e73·7461·6c6c·6564·0a0a··fips_installed.. | |||
| 0003b140:·2d20·6e61·6d65·3a20·456e·7375·7265·2064··-·name:·Ensure·d | |||
| 0003b150:·7261·6375·742d·6669·7073·2069·7320·696e··racut-fips·is·in | |||
| 0003b160:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b170:·653a·0a20·2020·206e·616d·653a·2064·7261··e:.····name:·dra | |||
| 0003b180:·6375·742d·6669·7073·0a20·2020·2073·7461··cut-fips.····sta | |||
| 0003b190:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b1a0:·656e·3a20·2820·6e6f·7420·2820·6c6f·6f6b··en:·(·not·(·look | |||
| 0003b1b0:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | |||
| 0003b1c0:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | |||
| 0003b1d0:·2d6f·7362·7569·6c64·2220·2920·616e·6420··-osbuild"·)·and· | |||
| 0003b1e0:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b1f0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b200:·6765·730a·2020·2020·6f72·2022·6b65·726e··ges.····or·"kern | |||
| 0003b210:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003b220:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b230:·7329·2029·0a20·2074·6167·733a·0a20·202d··s)·).··tags:.··- | |||
| 0003b240:·2043·4a49·532d·352e·3130·2e31·2e32·0a20···CJIS-5.10.1.2.· | |||
| 0003b250:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b260:·332e·3133·2e31·310a·2020·2d20·4e49·5354··3.13.11.··-·NIST | |||
| 0003b270:·2d38·3030·2d31·3731·2d33·2e31·332e·380a··-800-171-3.13.8. | |||
| 0003b280:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b290:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003b2a0:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003b2b0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b2c0:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003b2d0:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b2e0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b2f0:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b300:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003b310:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b320:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b330:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b340:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b350:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b360:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b370:·2d20·7061·636b·6167·655f·6472·6163·7574··-·package_dracut | |||
| 0003b380:·2d66·6970·735f·696e·7374·616c·6c65·640a··-fips_installed. | |||
| 0003b390:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b3a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b3b0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b3c0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b3d0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b3e0:·3d22·2369·646d·3631·3834·2220·7461·6269··="#idm6184"·tabi | |||
| 0003b3f0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b400:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b410:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b420:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b430:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b440:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| Max diff block lines reached; 6464783/6482889 bytes (99.72%) of diff not shown. | |||
| Offset 99, 53 lines modified | Offset 99, 14 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | include·install_dracut-fips | ||
| 116 | class·install_dracut-fips·{ | ||
| 117 | ··package·{·'dracut-fips': | ||
| 118 | ····ensure·=>·'installed', | ||
| 119 | ··} | ||
| 120 | } | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 127 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 128 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 129 | ····yum·install·-y·"dracut-fips" | ||
| 130 | fi | ||
| 131 | else | ||
| 132 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 133 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·--add=dracut-fips | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 111 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 112 | ··package_facts: |
| Offset 185, 14 lines modified | Offset 146, 53 lines modified | ||
| 185 | ··-·NIST-800-53-SC-13 | 146 | ··-·NIST-800-53-SC-13 |
| 186 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 187 | ··-·low_complexity | 148 | ··-·low_complexity |
| 188 | ··-·low_disruption | 149 | ··-·low_disruption |
| 189 | ··-·medium_severity | 150 | ··-·medium_severity |
| 190 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 191 | ··-·package_dracut-fips_installed | 152 | ··-·package_dracut-fips_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"dracut-fips" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 164 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 165 | ····yum·install·-y·"dracut-fips" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_dracut-fips | ||
| 176 | class·install_dracut-fips·{ | ||
| 177 | ··package·{·'dracut-fips': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=dracut-fips | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 188 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 194 | $·sudo·yum·install·dracut-fips | 189 | $·sudo·yum·install·dracut-fips |
| 195 | dracut·-f | 190 | dracut·-f |
| 196 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 191 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 197 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 192 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 198 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 193 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 223, 83 lines modified | Offset 223, 14 lines modified | ||
| 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 233 | #·prelink·not·installed | ||
| 234 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 235 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 236 | ····then | ||
| 237 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 238 | ····else | ||
| 239 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 240 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| Max diff block lines reached; 724968/733190 bytes (98.88%) of diff not shown. | |||
| Offset 15153, 419 lines modified | Offset 15153, 419 lines modified | ||
| 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | ||
| 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b370:·6e20· | 0003b370:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b380:·87b2 | 0003b380:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b390:·6c61 | 0003b390:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b3a0:·6 | 0003b3a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b3b0:·643d | 0003b3b0:·2220·6964·3d22·6964·6d35·3331·3022·3e3c··"·id="idm5310">< | ||
| 0003b3c0:· | 0003b3c0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b3d0:· | 0003b3d0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b3e0:· | 0003b3e0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b3f0:· | 0003b3f0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b400:· | 0003b400:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b410:· | 0003b410:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003b420:·6 | 0003b420:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003b430:· | 0003b430:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b440:·7 | 0003b440:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003b450:·6 | 0003b450:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b460:· | 0003b460:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b470:·6 | 0003b470:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b480:· | 0003b480:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b490:· | 0003b490:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003b4a0:· | 0003b4a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b4b0:· | 0003b4b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003b4c0:·6 | 0003b4c0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003b4d0:· | 0003b4d0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003b4e0:· | 0003b4e0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003b4f0:· | 0003b4f0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003b500:· | 0003b500:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b510:· | 0003b510:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | ||
| 0003b520:· | 0003b520:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | ||
| 0003b530:· | 0003b530:·2d30·3130·3032·300a·2020·2d20·4e49·5354··-010020.··-·NIST | ||
| 0003b540:·2 | 0003b540:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b550:· | 0003b550:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b560:· | 0003b560:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b570:· | 0003b570:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b580:· | 0003b580:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b590:· | 0003b590:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b5a0:· | 0003b5a0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b5b0:· | 0003b5b0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b5c0:·2 | 0003b5c0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b5d0:· | 0003b5d0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b5e0:· | 0003b5e0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b5f0:·62 | 0003b5f0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b600:·657 | 0003b600:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b610:· | 0003b610:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b620:· | 0003b620:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b630:· | 0003b630:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b640:· | 0003b640:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b650:· | 0003b650:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b660:· | 0003b660:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003b670:·2 | 0003b670:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003b680:·6 | 0003b680:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003b690:· | 0003b690:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003b6a0:· | 0003b6a0:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003b6b0:· | 0003b6b0:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003b6c0:· | 0003b6c0:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003b6d0:· | 0003b6d0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b6e0:· | 0003b6e0:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b6f0:· | 0003b6f0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b700:· | 0003b700:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003b710:· | 0003b710:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003b720:· | 0003b720:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003b730:·6 | 0003b730:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b740:·6 | 0003b740:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003b750:· | 0003b750:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003b760:·6 | 0003b760:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b770:· | 0003b770:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003b780:·2 | 0003b780:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b790:· | 0003b790:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003b7a0:·6 | 0003b7a0:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| 0003b7b0:·6 | 0003b7b0:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | ||
| 0003b7c0:·65 | 0003b7c0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b7d0:· | 0003b7d0:·0a20·2020·2029·0a20·202d·2061·6e73·6962··.····).··-·ansib | ||
| 0003b7e0:·6 | 0003b7e0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| 0003b7f0:·6 | 0003b7f0:·696e·205b·2022·4665·646f·7261·222c·2022··in·[·"Fedora",·" | ||
| 0003b800:· | 0003b800:·5265·6448·6174·222c·2022·4365·6e74·4f53··RedHat",·"CentOS | ||
| 0003b810:· | 0003b810:·222c·2022·4f72·6163·6c65·4c69·6e75·7822··",·"OracleLinux" | ||
| 0003b820:· | 0003b820:·205d·0a20·2074·6167·733a·0a20·202d·2043···].··tags:.··-·C | ||
| 0003b830:· | 0003b830:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003b840:·2 | 0003b840:·2044·4953·412d·5354·4947·2d4f·4c30·372d···DISA-STIG-OL07- | ||
| 0003b850:· | 0003b850:·3030·2d30·3130·3032·300a·2020·2d20·4e49··00-010020.··-·NI | ||
| 0003b860:· | 0003b860:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003b870:· | 0003b870:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b880:· | 0003b880:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003b890:· | 0003b890:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003b8a0:· | 0003b8a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b8b0:· | 0003b8b0:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003b8c0:· | 0003b8c0:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003b8d0:· | 0003b8d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b8e0:· | 0003b8e0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003b8f0:· | 0003b8f0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003b900:· | 0003b900:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b910:· | 0003b910:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003b920:·2 | 0003b920:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003b930:· | 0003b930:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003b940:· | 0003b940:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003b950:· | 0003b950:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003b960:· | 0003b960:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003b970:·3 | 0003b970:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003b980:· | 0003b980:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003b990:·2020·2d20· | 0003b990:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003b9a0:· | 0003b9a0:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003b9b0:· | 0003b9b0:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003b9c0:· | 0003b9c0:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003b9d0:· | 0003b9d0:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003b9e0:· | 0003b9e0:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003b9f0:· | 0003b9f0:·6420·287a·7970·7065·7229·270a·2020·7365··d·(zypper)'.··se | ||
| 0003ba00:·4 | 0003ba00:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003ba10:· | 0003ba10:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003ba20:· | 0003ba20:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | ||
| 0003ba30:· | 0003ba30:·7220·696e·202d·6620·2d79·0a20·2077·6865··r·in·-f·-y.··whe | ||
| 0003ba40:· | 0003ba40:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003ba50:· | 0003ba50:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003ba60:· | 0003ba60:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003ba70:· | 0003ba70:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003ba80:· | 0003ba80:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003ba90:· | 0003ba90:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003baa0:· | 0003baa0:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003bab0:· | 0003bab0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bac0:· | 0003bac0:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003bad0:·6 | 0003bad0:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| Max diff block lines reached; 6222096/6278566 bytes (99.10%) of diff not shown. | |||
| Offset 104, 33 lines modified | Offset 104, 14 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 129 | -·name:·Gather·the·package·facts | 116 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 117 | ··package_facts: |
| Offset 303, 14 lines modified | Offset 284, 33 lines modified | ||
| 303 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 304 | ··-·high_complexity | 285 | ··-·high_complexity |
| 305 | ··-·high_severity | 286 | ··-·high_severity |
| 306 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 307 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 308 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 309 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 313 | run·the·following·command·to·determine·which·package·owns·it: | 307 | run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 316 | $·sudo·rpm·--restore·PACKAGENAME | 310 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 331, 46 lines modified | Offset 331, 14 lines modified | ||
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 343 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 344 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 345 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 346 | declare·-A·SETPERMS_RPM_DICT | ||
| 347 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 348 | #·is·expected·by·the·RPM·database | ||
| 349 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 350 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 351 | do | ||
| 352 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 353 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 354 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 370 | -·name:·Gather·the·package·facts | 343 | -·name:·Gather·the·package·facts |
| 371 | ··package_facts: | 344 | ··package_facts: |
| Offset 482, 14 lines modified | Offset 450, 46 lines modified | ||
| 482 | ··-·PCI-DSSv4-11.5.2 | 450 | ··-·PCI-DSSv4-11.5.2 |
| 483 | ··-·high_complexity | 451 | ··-·high_complexity |
| 484 | ··-·high_severity | 452 | ··-·high_severity |
| 485 | ··-·medium_disruption | 453 | ··-·medium_disruption |
| 486 | ··-·no_reboot_needed | 454 | ··-·no_reboot_needed |
| 487 | ··-·restrict_strategy | 455 | ··-·restrict_strategy |
| 488 | ··-·rpm_verify_ownership | 456 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 666262/673464 bytes (98.93%) of diff not shown. | |||
| Offset 15184, 419 lines modified | Offset 15184, 419 lines modified | ||
| 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | ||
| 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b560:·7469·6f6e·20 | 0003b560:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b570:·7420 | 0003b570:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b580:·7620 | 0003b580:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b590:·6 | 0003b590:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b5a0:·2220 | 0003b5a0:·7073·6522·2069·643d·2269·646d·3533·3130··pse"·id="idm5310 | ||
| 0003b5b0:· | 0003b5b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b5c0:· | 0003b5c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b5d0:·6 | 0003b5d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b5e0:· | 0003b5e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b5f0:·6 | 0003b5f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b600:· | 0003b600:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b610:· | 0003b610:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b620:·7 | 0003b620:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b630:· | 0003b630:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b640:·3 | 0003b640:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b650:· | 0003b650:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b660:· | 0003b660:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b670:· | 0003b670:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b680:·7 | 0003b680:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b690:· | 0003b690:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b6a0:·6 | 0003b6a0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b6b0:· | 0003b6b0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003b6c0:·6 | 0003b6c0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003b6d0:· | 0003b6d0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003b6e0:· | 0003b6e0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003b6f0:· | 0003b6f0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003b700:· | 0003b700:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003b710:·2 | 0003b710:·2d20·4449·5341·2d53·5449·472d·4f4c·3037··-·DISA-STIG-OL07 | ||
| 0003b720:· | 0003b720:·2d30·302d·3031·3030·3230·0a20·202d·204e··-00-010020.··-·N | ||
| 0003b730:· | 0003b730:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b740:· | 0003b740:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b750:· | 0003b750:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b760:· | 0003b760:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b770:· | 0003b770:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b780:· | 0003b780:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b790:· | 0003b790:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b7a0:· | 0003b7a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b7b0:· | 0003b7b0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b7c0:· | 0003b7c0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b7d0:·2 | 0003b7d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b7e0:· | 0003b7e0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b7f0:· | 0003b7f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b800:· | 0003b800:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b810:·2020·2 | 0003b810:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b820:·6 | 0003b820:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b830:· | 0003b830:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b840:· | 0003b840:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b850:· | 0003b850:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b860:· | 0003b860:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003b870:· | 0003b870:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003b880:·6 | 0003b880:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003b890:· | 0003b890:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003b8a0:·20 | 0003b8a0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003b8b0:· | 0003b8b0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003b8c0:·6 | 0003b8c0:·6e64·270a·2020·7365·745f·6661·6374·3a0a··nd'.··set_fact:. | ||
| 0003b8d0:· | 0003b8d0:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003b8e0:·6 | 0003b8e0:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003b8f0:· | 0003b8f0:·643a·2079·756d·2072·6569·6e73·7461·6c6c··d:·yum·reinstall | ||
| 0003b900:· | 0003b900:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003b910:·6 | 0003b910:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003b920:·6 | 0003b920:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b930:· | 0003b930:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003b940:· | 0003b940:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003b950:· | 0003b950:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b960:· | 0003b960:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003b970:· | 0003b970:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003b980:· | 0003b980:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003b990:·6 | 0003b990:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003b9a0:· | 0003b9a0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003b9b0:·69 | 0003b9b0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b9c0:· | 0003b9c0:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003b9d0:· | 0003b9d0:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003b9e0:·6 | 0003b9e0:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003b9f0:· | 0003b9f0:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003ba00:· | 0003ba00:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003ba10:· | 0003ba10:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003ba20:· | 0003ba20:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003ba30:· | 0003ba30:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 0003ba40:· | 0003ba40:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | ||
| 0003ba50:· | 0003ba50:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003ba60:· | 0003ba60:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003ba70:· | 0003ba70:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003ba80:· | 0003ba80:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003ba90:· | 0003ba90:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003baa0:· | 0003baa0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003bab0:· | 0003bab0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003bac0:·6 | 0003bac0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003bad0:· | 0003bad0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003bae0:· | 0003bae0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003baf0:· | 0003baf0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb00:· | 0003bb00:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003bb10:· | 0003bb10:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003bb20:· | 0003bb20:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003bb30:· | 0003bb30:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003bb40:· | 0003bb40:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003bb50:· | 0003bb50:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003bb60:· | 0003bb60:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003bb70:· | 0003bb70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003bb80:· | 0003bb80:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003bb90:· | 0003bb90:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003bba0:·5 | 0003bba0:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003bbb0:·2 | 0003bbb0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003bbc0:· | 0003bbc0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003bbd0:· | 0003bbd0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003bbe0:· | 0003bbe0:·6d61·6e64·2028·7a79·7070·6572·2927·0a20··mand·(zypper)'.· | ||
| 0003bbf0:·3 | 0003bbf0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003bc00:· | 0003bc00:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003bc10:· | 0003bc10:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7a79··einstall_cmd:·zy | ||
| 0003bc20:· | 0003bc20:·7070·6572·2069·6e20·2d66·202d·790a·2020··pper·in·-f·-y.·· | ||
| 0003bc30:· | 0003bc30:·7768·656e·3a0a·2020·2d20·6e6f·7420·2820··when:.··-·not·(· | ||
| 0003bc40:· | 0003bc40:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | ||
| 0003bc50:· | 0003bc50:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bc60:· | 0003bc60:·6573·2061·6e64·2022·7270·6d2d·6f73·7472··es·and·"rpm-ostr | ||
| 0003bc70:· | 0003bc70:·6565·2220·696e·2061·6e73·6962·6c65·5f66··ee"·in·ansible_f | ||
| 0003bc80:·6 | 0003bc80:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003bc90:·20 | 0003bc90:·2020·616e·6420·2262·6f6f·7463·2220·696e····and·"bootc"·in | ||
| 0003bca0:· | 0003bca0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bcb0:· | 0003bcb0:·6163·6b61·6765·7320·616e·6420·6e6f·7420··ackages·and·not· | ||
| 0003bcc0:· | 0003bcc0:·226f·7065·6e73·6869·6674·2d6b·7562·656c··"openshift-kubel | ||
| Max diff block lines reached; 16245185/16301655 bytes (99.65%) of diff not shown. | |||
| Offset 111, 33 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 124 | ··package_facts: |
| Offset 310, 14 lines modified | Offset 291, 33 lines modified | ||
| 310 | ··-·PCI-DSSv4-11.5.2 | 291 | ··-·PCI-DSSv4-11.5.2 |
| 311 | ··-·high_complexity | 292 | ··-·high_complexity |
| 312 | ··-·high_severity | 293 | ··-·high_severity |
| 313 | ··-·medium_disruption | 294 | ··-·medium_disruption |
| 314 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 315 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 316 | ··-·rpm_verify_hashes | 297 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 318 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 312 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 319 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 313 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 320 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 314 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 321 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 340, 50 lines modified | Offset 340, 14 lines modified | ||
| 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 362 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 363 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 364 | ········do | ||
| 365 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 366 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 367 | ········done | ||
| 368 | done | ||
| 369 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 370 | #·correct·values | ||
| 371 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 372 | do | ||
| 373 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 374 | done | ||
| 375 | else | ||
| 376 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 377 | fi | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 383 | -·name:·Gather·the·package·facts | 352 | -·name:·Gather·the·package·facts |
| 384 | ··package_facts: | 353 | ··package_facts: |
| Offset 499, 14 lines modified | Offset 463, 50 lines modified | ||
| 499 | ··-·PCI-DSSv4-11.5.2 | 463 | ··-·PCI-DSSv4-11.5.2 |
| 500 | ··-·high_complexity | 464 | ··-·high_complexity |
| 501 | ··-·high_severity | 465 | ··-·high_severity |
| 502 | ··-·medium_disruption | 466 | ··-·medium_disruption |
| 503 | ··-·no_reboot_needed | 467 | ··-·no_reboot_needed |
| 504 | ··-·restrict_strategy | 468 | ··-·restrict_strategy |
| 505 | ··-·rpm_verify_permissions | 469 | ··-·rpm_verify_permissions |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1302334/1309896 bytes (99.42%) of diff not shown. | |||
| Offset 15258, 419 lines modified | Offset 15258, 419 lines modified | ||
| 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | ||
| 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba00:·6469·6174·696f·6e20· | 0003ba00:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003ba10:·7 | 0003ba10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003ba20:·3c64 | 0003ba20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003ba30:·6 | 0003ba30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003ba40:·7073 | 0003ba40:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003ba50:· | 0003ba50:·3331·3022·3e3c·7461·626c·6520·636c·6173··310"><table·clas | ||
| 0003ba60:· | 0003ba60:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003ba70:·7 | 0003ba70:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ba80:· | 0003ba80:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ba90:·6 | 0003ba90:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003baa0:· | 0003baa0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003bab0:· | 0003bab0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003bac0:· | 0003bac0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003bad0:· | 0003bad0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003bae0:·6 | 0003bae0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003baf0:· | 0003baf0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003bb00:· | 0003bb00:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003bb10:·2 | 0003bb10:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003bb20:·7 | 0003bb20:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003bb30:· | 0003bb30:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003bb40:· | 0003bb40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003bb50:·65 | 0003bb50:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003bb60:·7 | 0003bb60:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003bb70:·6 | 0003bb70:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003bb80:· | 0003bb80:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003bb90:· | 0003bb90:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003bba0:·20 | 0003bba0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bbb0:· | 0003bbb0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 0003bbc0:· | 0003bbc0:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | ||
| 0003bbd0:· | 0003bbd0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bbe0:·2 | 0003bbe0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bbf0:· | 0003bbf0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bc00:· | 0003bc00:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bc10:·2 | 0003bc10:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bc20:· | 0003bc20:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bc30:· | 0003bc30:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bc40:·2 | 0003bc40:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bc50:·2 | 0003bc50:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bc60:· | 0003bc60:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bc70:· | 0003bc70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc80:· | 0003bc80:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bc90:· | 0003bc90:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bca0:· | 0003bca0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bcb0:· | 0003bcb0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bcc0:·6 | 0003bcc0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bcd0:·7 | 0003bcd0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bce0:· | 0003bce0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bcf0:· | 0003bcf0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bd00:· | 0003bd00:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bd10:· | 0003bd10:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bd20:·6 | 0003bd20:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bd30:· | 0003bd30:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bd40:·6 | 0003bd40:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003bd50:· | 0003bd50:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003bd60:·6 | 0003bd60:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003bd70:· | 0003bd70:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003bd80:· | 0003bd80:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003bd90:·6 | 0003bd90:·5f63·6d64·3a20·7975·6d20·7265·696e·7374··_cmd:·yum·reinst | ||
| 0003bda0:· | 0003bda0:·616c·6c20·2d79·0a20·2077·6865·6e3a·0a20··all·-y.··when:.· | ||
| 0003bdb0:· | 0003bdb0:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003bdc0:· | 0003bdc0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bdd0:· | 0003bdd0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003bde0:· | 0003bde0:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003bdf0:· | 0003bdf0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003be00:· | 0003be00:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003be10:· | 0003be10:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003be20:·6 | 0003be20:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003be30:· | 0003be30:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003be40:·6 | 0003be40:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003be50:· | 0003be50:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003be60:· | 0003be60:·636b·6167·6573·0a20·2020·2029·0a20·202d··ckages.····).··- | ||
| 0003be70:· | 0003be70:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003be80:· | 0003be80:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003be90:· | 0003be90:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003bea0:· | 0003bea0:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003beb0:· | 0003beb0:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003bec0:· | 0003bec0:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bed0:· | 0003bed0:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | ||
| 0003bee0:· | 0003bee0:·2d4f·4c30·372d·3030·2d30·3130·3032·300a··-OL07-00-010020. | ||
| 0003bef0:· | 0003bef0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003bf00:· | 0003bf00:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003bf10:· | 0003bf10:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003bf20:· | 0003bf20:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003bf30:· | 0003bf30:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003bf40:· | 0003bf40:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003bf50:· | 0003bf50:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bf60:· | 0003bf60:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003bf70:· | 0003bf70:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003bf80:· | 0003bf80:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bf90:· | 0003bf90:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003bfa0:· | 0003bfa0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003bfb0:· | 0003bfb0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003bfc0:· | 0003bfc0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003bfd0:· | 0003bfd0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003bfe0:· | 0003bfe0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003bff0:· | 0003bff0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c000:· | 0003c000:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c010:·202d·20 | 0003c010:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c020:· | 0003c020:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003c030:· | 0003c030:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003c040:· | 0003c040:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003c050:· | 0003c050:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003c060:· | 0003c060:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003c070:· | 0003c070:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003c080:·36 | 0003c080:·636f·6d6d·616e·6420·287a·7970·7065·7229··command·(zypper) | ||
| 0003c090:· | 0003c090:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003c0a0:· | 0003c0a0:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003c0b0:· | 0003c0b0:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003c0c0:· | 0003c0c0:·207a·7970·7065·7220·696e·202d·6620·2d79···zypper·in·-f·-y | ||
| 0003c0d0:· | 0003c0d0:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003c0e0:·202 | 0003c0e0:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003c0f0:· | 0003c0f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c100:· | 0003c100:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003c110:· | 0003c110:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003c120:·6 | 0003c120:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c130:· | 0003c130:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003c140:· | 0003c140:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c150:·7 | 0003c150:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003c160:· | 0003c160:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| Max diff block lines reached; 27422448/27478918 bytes (99.79%) of diff not shown. | |||
| Offset 15046, 246 lines modified | Offset 15046, 246 lines modified | ||
| 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003acc0:·656d·6564·6961·7469·6f6e·204 | 0003acc0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003acd0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ace0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003acf0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad10:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | |||
| 0003ad20:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad30:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad40:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003ad50:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003ad60:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ad70:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ad80:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ad90:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ada0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003adb0:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003adc0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003add0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ade0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003adf0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae00:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae10:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003a | 0003acd0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003a | 0003ace0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003a | 0003acf0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003a | 0003ad00:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003a | 0003ad10:·646d·3631·3833·223e·3c74·6162·6c65·2063··dm6183"><table·c | ||
| 0003a | 0003ad20:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003a | 0003ad30:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003a | 0003ad40:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003a | 0003ad50:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003a | 0003ad60:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003a | 0003ad70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a | 0003ad80:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003a | 0003ad90:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003a | 0003ada0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003a | 0003adb0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003a | 0003adc0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003a | 0003add0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003a | 0003ade0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003a | 0003adf0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003a | 0003ae00:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003af60:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003af70:·6472·6163·7574·2d66·6970·730a·0a63·6c61··dracut-fips..cla | |||
| 0003af80:·7373·2069·6e73·7461·6c6c·5f64·7261·6375··ss·install_dracu | |||
| 0003a | 0003ae10:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003ae20:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003ae30:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003ae40:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003ae50:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003ae60:·434a·4953·2d35·2e31·302e·312e·320a·2020··CJIS-5.10.1.2.·· | |||
| 0003ae70:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003ae80:·2e31·332e·3131·0a20·202d·204e·4953·542d··.13.11.··-·NIST- | |||
| 0003ae90:·3830·302d·3137·312d·332e·3133·2e38·0a20··800-171-3.13.8.· | |||
| 0003aea0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003aeb0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003aec0:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | |||
| 0003aed0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003aee0:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003aef0:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003af00:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003af10:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003af20:·2d35·332d·5343·2d31·330a·2020·2d20·656e··-53-SC-13.··-·en | |||
| 0003af30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003af40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003af50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003af60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003af70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003af80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003af90:·2070·6163·6b61·6765·5f64·7261·6375·742d···package_dracut- | |||
| 0003afa0:·6669·7073·5f69·6e73·7461·6c6c·6564·0a0a··fips_installed.. | |||
| 0003afb0:·2d20·6e61·6d65·3a20·456e·7375·7265·2064··-·name:·Ensure·d | |||
| 0003afc0:·7261·6375·742d·6669·7073·2069·7320·696e··racut-fips·is·in | |||
| 0003afd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003afe0:·653a·0a20·2020·206e·616d·653a·2064·7261··e:.····name:·dra | |||
| 0003aff0:·6375·742d·6669·7073·0a20·2020·2073·7461··cut-fips.····sta | |||
| 0003b000:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b010:·656e·3a20·2820·6e6f·7420·2820·6c6f·6f6b··en:·(·not·(·look | |||
| 0003b020:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | |||
| 0003b030:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | |||
| 0003b040:·2d6f·7362·7569·6c64·2220·2920·616e·6420··-osbuild"·)·and· | |||
| 0003b050:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b060:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b070:·6765·730a·2020·2020·6f72·2022·6b65·726e··ges.····or·"kern | |||
| 0003b080:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003b090:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b0a0:·7329·2029·0a20·2074·6167·733a·0a20·202d··s)·).··tags:.··- | |||
| 0003b0b0:·2043·4a49·532d·352e·3130·2e31·2e32·0a20···CJIS-5.10.1.2.· | |||
| 0003b0c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b0d0:·332e·3133·2e31·310a·2020·2d20·4e49·5354··3.13.11.··-·NIST | |||
| 0003b0e0:·2d38·3030·2d31·3731·2d33·2e31·332e·380a··-800-171-3.13.8. | |||
| 0003b0f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b100:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003b110:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003b120:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b130:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003b140:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b150:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b160:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b170:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003b180:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b190:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1a0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1b0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1c0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1e0:·2d20·7061·636b·6167·655f·6472·6163·7574··-·package_dracut | |||
| 0003b1f0:·2d66·6970·735f·696e·7374·616c·6c65·640a··-fips_installed. | |||
| 0003b200:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b210:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b220:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b230:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b250:·3d22·2369·646d·3631·3834·2220·7461·6269··="#idm6184"·tabi | |||
| 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| Max diff block lines reached; 6464783/6482889 bytes (99.72%) of diff not shown. | |||
| Offset 92, 53 lines modified | Offset 92, 14 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | include·install_dracut-fips | ||
| 109 | class·install_dracut-fips·{ | ||
| 110 | ··package·{·'dracut-fips': | ||
| 111 | ····ensure·=>·'installed', | ||
| 112 | ··} | ||
| 113 | } | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 121 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 122 | ····yum·install·-y·"dracut-fips" | ||
| 123 | fi | ||
| 124 | else | ||
| 125 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 126 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=dracut-fips | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Gather·the·package·facts | 104 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 105 | ··package_facts: |
| Offset 178, 14 lines modified | Offset 139, 53 lines modified | ||
| 178 | ··-·NIST-800-53-SC-13 | 139 | ··-·NIST-800-53-SC-13 |
| 179 | ··-·enable_strategy | 140 | ··-·enable_strategy |
| 180 | ··-·low_complexity | 141 | ··-·low_complexity |
| 181 | ··-·low_disruption | 142 | ··-·low_disruption |
| 182 | ··-·medium_severity | 143 | ··-·medium_severity |
| 183 | ··-·no_reboot_needed | 144 | ··-·no_reboot_needed |
| 184 | ··-·package_dracut-fips_installed | 145 | ··-·package_dracut-fips_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"dracut-fips" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 156 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 157 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 158 | ····yum·install·-y·"dracut-fips" | ||
| 159 | fi | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_dracut-fips | ||
| 169 | class·install_dracut-fips·{ | ||
| 170 | ··package·{·'dracut-fips': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=dracut-fips | ||
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 186 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 181 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 187 | $·sudo·yum·install·dracut-fips | 182 | $·sudo·yum·install·dracut-fips |
| 188 | dracut·-f | 183 | dracut·-f |
| 189 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 184 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 190 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 185 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 191 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 186 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 216, 83 lines modified | Offset 216, 14 lines modified | ||
| 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 225 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 226 | #·prelink·not·installed | ||
| 227 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 228 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 229 | ····then | ||
| 230 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 231 | ····else | ||
| 232 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 233 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| Max diff block lines reached; 724968/733190 bytes (98.88%) of diff not shown. | |||
| Offset 15123, 419 lines modified | Offset 15123, 419 lines modified | ||
| 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | ||
| 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b190:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b190:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b1a0:·6c6 | 0003b1a0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b1b0:·3e3c | 0003b1b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b1c0:·2270 | 0003b1c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b1d0:·6 | 0003b1d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b1e0:·6d35 | 0003b1e0:·2269·646d·3533·3130·223e·3c74·6162·6c65··"idm5310"><table | ||
| 0003b1f0:· | 0003b1f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b200:·6 | 0003b200:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b210:·6 | 0003b210:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b220:· | 0003b220:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b230:· | 0003b230:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b240:· | 0003b240:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b250:· | 0003b250:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b260:· | 0003b260:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b270:· | 0003b270:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b280:· | 0003b280:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b290:· | 0003b290:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b2a0:· | 0003b2a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b2b0:· | 0003b2b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b2c0:· | 0003b2c0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b2d0:· | 0003b2d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b2e0:·6 | 0003b2e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b2f0:· | 0003b2f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b300:· | 0003b300:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b310:·6 | 0003b310:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b320:· | 0003b320:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b330:·6 | 0003b330:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b340:· | 0003b340:·302e·342e·310a·2020·2d20·4449·5341·2d53··0.4.1.··-·DISA-S | ||
| 0003b350:· | 0003b350:·5449·472d·4f4c·3037·2d30·302d·3031·3030··TIG-OL07-00-0100 | ||
| 0003b360:· | 0003b360:·3230·0a20·202d·204e·4953·542d·3830·302d··20.··-·NIST-800- | ||
| 0003b370:· | 0003b370:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b380:· | 0003b380:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b390:· | 0003b390:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b3a0:· | 0003b3a0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b3b0:· | 0003b3b0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b3c0:· | 0003b3c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b3d0:· | 0003b3d0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b3e0:· | 0003b3e0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b3f0:· | 0003b3f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b400:· | 0003b400:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b410:· | 0003b410:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b420:· | 0003b420:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b430:· | 0003b430:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b440:· | 0003b440:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b450:· | 0003b450:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b460:· | 0003b460:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b470:· | 0003b470:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b480:· | 0003b480:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b490:· | 0003b490:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b4a0:· | 0003b4a0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b4b0:· | 0003b4b0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b4c0:· | 0003b4c0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b4d0:· | 0003b4d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b4e0:· | 0003b4e0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b4f0:·6 | 0003b4f0:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b500:·7 | 0003b500:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b510:·6 | 0003b510:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b520:·3 | 0003b520:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b530:·6 | 0003b530:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b540:· | 0003b540:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b550:· | 0003b550:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b560:· | 0003b560:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b570:· | 0003b570:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b580:· | 0003b580:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b590:·7 | 0003b590:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b5a0:·6 | 0003b5a0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b5b0:·6 | 0003b5b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b5c0:· | 0003b5c0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b5d0:· | 0003b5d0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b5e0:· | 0003b5e0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b5f0:· | 0003b5f0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b600:· | 0003b600:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| 0003b610:·7 | 0003b610:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b620:· | 0003b620:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b630:· | 0003b630:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b640:·61 | 0003b640:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b650:· | 0003b650:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b660:· | 0003b660:·2e31·302e·342e·310a·2020·2d20·4449·5341··.10.4.1.··-·DISA | ||
| 0003b670:· | 0003b670:·2d53·5449·472d·4f4c·3037·2d30·302d·3031··-STIG-OL07-00-01 | ||
| 0003b680:·3 | 0003b680:·3030·3230·0a20·202d·204e·4953·542d·3830··0020.··-·NIST-80 | ||
| 0003b690:· | 0003b690:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b6a0:· | 0003b6a0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b6b0:· | 0003b6b0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b6c0:· | 0003b6c0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b6d0:· | 0003b6d0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b6e0:· | 0003b6e0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b6f0:· | 0003b6f0:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b700:· | 0003b700:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b710:· | 0003b710:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b720:· | 0003b720:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003b730:·2 | 0003b730:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003b740:· | 0003b740:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003b750:· | 0003b750:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003b760:· | 0003b760:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003b770:·6 | 0003b770:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003b780:· | 0003b780:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003b790:· | 0003b790:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003b7a0:· | 0003b7a0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003b7b0:· | 0003b7b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003b7c0:· | 0003b7c0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003b7d0:· | 0003b7d0:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003b7e0:· | 0003b7e0:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003b7f0:· | 0003b7f0:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b800:· | 0003b800:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b810:· | 0003b810:·7461·6c6c·2063·6f6d·6d61·6e64·2028·7a79··tall·command·(zy | ||
| 0003b820:· | 0003b820:·7070·6572·2927·0a20·2073·6574·5f66·6163··pper)'.··set_fac | ||
| 0003b830:· | 0003b830:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b840:· | 0003b840:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b850:· | 0003b850:·5f63·6d64·3a20·7a79·7070·6572·2069·6e20··_cmd:·zypper·in· | ||
| 0003b860:·2 | 0003b860:·2d66·202d·790a·2020·7768·656e·3a0a·2020··-f·-y.··when:.·· | ||
| 0003b870:· | 0003b870:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003b880:· | 0003b880:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b890:· | 0003b890:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003b8a0:· | 0003b8a0:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003b8b0:· | 0003b8b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b8c0:· | 0003b8c0:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003b8d0:·6f | 0003b8d0:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003b8e0:· | 0003b8e0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b8f0:· | 0003b8f0:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| Max diff block lines reached; 9746227/9802697 bytes (99.42%) of diff not shown. | |||
| Offset 97, 33 lines modified | Offset 97, 14 lines modified | ||
| 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Gather·the·package·facts | 109 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 110 | ··package_facts: |
| Offset 296, 14 lines modified | Offset 277, 33 lines modified | ||
| 296 | ··-·PCI-DSSv4-11.5.2 | 277 | ··-·PCI-DSSv4-11.5.2 |
| 297 | ··-·high_complexity | 278 | ··-·high_complexity |
| 298 | ··-·high_severity | 279 | ··-·high_severity |
| 299 | ··-·medium_disruption | 280 | ··-·medium_disruption |
| 300 | ··-·no_reboot_needed | 281 | ··-·no_reboot_needed |
| 301 | ··-·restrict_strategy | 282 | ··-·restrict_strategy |
| 302 | ··-·rpm_verify_hashes | 283 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 304 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 305 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 306 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 307 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 326, 50 lines modified | Offset 326, 14 lines modified | ||
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 338 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 339 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 340 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 341 | declare·-A·SETPERMS_RPM_DICT | ||
| 342 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 343 | #·is·expected·by·the·RPM·database | ||
| 344 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 345 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 346 | do | ||
| 347 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 348 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 349 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 350 | ········do | ||
| 351 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | ········done | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 369 | -·name:·Gather·the·package·facts | 338 | -·name:·Gather·the·package·facts |
| 370 | ··package_facts: | 339 | ··package_facts: |
| Offset 485, 14 lines modified | Offset 449, 50 lines modified | ||
| 485 | ··-·PCI-DSSv4-11.5.2 | 449 | ··-·PCI-DSSv4-11.5.2 |
| 486 | ··-·high_complexity | 450 | ··-·high_complexity |
| 487 | ··-·high_severity | 451 | ··-·high_severity |
| 488 | ··-·medium_disruption | 452 | ··-·medium_disruption |
| 489 | ··-·no_reboot_needed | 453 | ··-·no_reboot_needed |
| 490 | ··-·restrict_strategy | 454 | ··-·restrict_strategy |
| 491 | ··-·rpm_verify_permissions | 455 | ··-·rpm_verify_permissions |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 855433/863003 bytes (99.12%) of diff not shown. | |||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d38·3939·3122·3e3c·7072·653e··="idm8991"><pre> | |||
| 00039460:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00039470:·735d·5d0a·6e61·6d65·203d·2022·676c·6962··s]].name·=·"glib | |||
| 00039480:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000394a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000394b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000394c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000394d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000394e0:·743d·2223·6964·6d38·3939·3222·2074·6162··t="#idm8992"·tab | |||
| 000394f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039530:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039540:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00039550:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 00039560:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039570:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039580:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039590:·3d22·6964·6d38·3939·3222·3e3c·7461·626c··="idm8992"><tabl | |||
| 000395a0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000395b0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000395c0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000395d0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 000395e0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000395f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039600:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00039610:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00039620:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039630:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00039640:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00039650:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00039660:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00039670:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00039680:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039690:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 000396a0:·6c6c·5f67·6c69·6263·0a0a·636c·6173·7320··ll_glibc..class· | |||
| 000396b0:·696e·7374·616c·6c5f·676c·6962·6320·7b0a··install_glibc·{. | |||
| 000396c0:·2020·7061·636b·6167·6520·7b20·2767·6c69····package·{·'gli | |||
| 000396d0:·6263·273a·0a20·2020·2065·6e73·7572·6520··bc':.····ensure· | |||
| 000396e0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 000396f0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 00039700:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039710:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039720:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039730:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039740:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039750:·3939·3322·2074·6162·696e·6465·783d·2230··993"·tabindex="0 | |||
| 00039760:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039770:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039780:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039790:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 000397a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 000397b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039 | 00039410:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 00039 | 00039420:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00039 | 00039430:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00039 | 00039440:·7365·2220·6964·3d22·6964·6d38·3939·3122··se"·id="idm8991" | ||
| 00039 | 00039450:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 00039 | 00039460:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039 | 00039470:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039 | 00039480:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039 | 00039490:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039 | 000394a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00039 | 000394b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00039 | 000394c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00039 | 000394d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 00039 | 000394e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 00039 | 000394f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 00039 | 00039500:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 00039 | 00039510:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00039 | 00039520:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 00039 | 00039530:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 000398f0:·7265·3e3c·636f·6465·3e0a·6966·2021·2072··re><code>.if·!·r | |||
| 00039900:·706d·202d·7120·2d2d·7175·6965·7420·2267··pm·-q·--quiet·"g | |||
| 00039910:·6c69·6263·2220·3b20·7468·656e·0a20·2020··libc"·;·then.··· | |||
| 00039920:·2079·756d·2069·6e73·7461·6c6c·202d·7920···yum·install·-y· | |||
| 00039 | 00039540:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 00039550:·2045·6e73·7572·6520·676c·6962·6320·6973···Ensure·glibc·is | |||
| 00039560:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039570:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039580:·676c·6962·630a·2020·2020·7374·6174·653a··glibc.····state: | |||
| 00039590:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 000395a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000395b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000395c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000395d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000395e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000395f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039610:·676c·6962·635f·696e·7374·616c·6c65·640a··glibc_installed. | |||
| 00039620:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00039630:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00039640:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00039650:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00039660:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00039670:·3d22·2369·646d·3839·3932·2220·7461·6269··="#idm8992"·tabi | |||
| 00039680:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039690:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000396a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 000396b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000396c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000396d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 000396e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 000396f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039700:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039710:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039720:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039730:·3939·3222·3e3c·7072·653e·3c63·6f64·653e··992"><pre><code> | |||
| 00039740:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00039750:·6d65·203d·2022·676c·6962·6322·0a76·6572··me·=·"glibc".ver | |||
| 00039760:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00039 | 00039770:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| Max diff block lines reached; 207334/230408 bytes (89.99%) of diff not shown. | |||
| Offset 64, 120 lines modified | Offset 64, 120 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 76 | -·name:·Ensure·glibc·is·installed | ||
| 77 | ··package: | ||
| 78 | ····name:·glibc | ||
| 79 | ····state:·present | ||
| 80 | ··tags: | ||
| 81 | ··-·enable_strategy | ||
| 82 | ··-·low_complexity | ||
| 83 | ··-·low_disruption | ||
| 84 | ··-·medium_severity | ||
| 85 | ··-·no_reboot_needed | ||
| 86 | ··-·package_glibc_installed | ||
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 72 | [[packages]] | 88 | [[packages]] |
| 73 | name·=·"glibc" | 89 | name·=·"glibc" |
| 74 | version·=·"*" | 90 | version·=·"*" |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 97 | ····yum·install·-y·"glibc" | ||
| 98 | fi | ||
| 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 80 | include·install_glibc | 104 | include·install_glibc |
| 81 | class·install_glibc·{ | 105 | class·install_glibc·{ |
| 82 | ··package·{·'glibc': | 106 | ··package·{·'glibc': |
| 83 | ····ensure·=>·'installed', | 107 | ····ensure·=>·'installed', |
| 84 | ··} | 108 | ··} |
| 85 | } | 109 | } |
| 86 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 87 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 88 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 89 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 90 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 91 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 92 | ····yum·install·-y·"glibc" | ||
| 93 | fi | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | package·--add=glibc | 115 | package·--add=glibc |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 105 | -·name:·Ensure· | 129 | -·name:·Ensure·uuidd·is·installed |
| 106 | ··package: | 130 | ··package: |
| 107 | ····name:· | 131 | ····name:·uuidd |
| 108 | ····state:·present | 132 | ····state:·present |
| 109 | ··tags: | 133 | ··tags: |
| 110 | ··-·enable_strategy | 134 | ··-·enable_strategy |
| 111 | ··-·low_complexity | 135 | ··-·low_complexity |
| 112 | ··-·low_disruption | 136 | ··-·low_disruption |
| 113 | ··-·medium_severity | 137 | ··-·medium_severity |
| 114 | ··-·no_reboot_needed | 138 | ··-·no_reboot_needed |
| 115 | ··-·package_ | 139 | ··-·package_uuidd_installed |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | [[packages]] | 141 | [[packages]] |
| 126 | name·=·"uuidd" | 142 | name·=·"uuidd" |
| 127 | version·=·"*" | 143 | version·=·"*" |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | if·!·rpm·-q·--quiet·"uuidd"·;·then | ||
| 150 | ····yum·install·-y·"uuidd" | ||
| 151 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | include·install_uuidd | 157 | include·install_uuidd |
| 134 | class·install_uuidd·{ | 158 | class·install_uuidd·{ |
| 135 | ··package·{·'uuidd': | 159 | ··package·{·'uuidd': |
| 136 | ····ensure·=>·'installed', | 160 | ····ensure·=>·'installed', |
| 137 | ··} | 161 | ··} |
| 138 | } | 162 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 26945/32852 bytes (82.02%) of diff not shown. | |||
| Offset 15108, 419 lines modified | Offset 15108, 419 lines modified | ||
| 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | ||
| 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b0a0:·6961·7469·6f6e·20 | 0003b0a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b0b0:·6970·7420 | 0003b0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b0c0:·6469 | 0003b0c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b0d0:· | 0003b0d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b0e0:·7365 | 0003b0e0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b0f0:·3 | 0003b0f0:·3130·223e·3c74·6162·6c65·2063·6c61·7373··10"><table·class | ||
| 0003b100:· | 0003b100:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b110:· | 0003b110:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b120:·6 | 0003b120:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b130:· | 0003b130:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b140:· | 0003b140:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b150:· | 0003b150:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b160:· | 0003b160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b170:· | 0003b170:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b180:· | 0003b180:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b190:· | 0003b190:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b1a0:·3 | 0003b1a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b1b0:· | 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b1c0:· | 0003b1c0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b1d0:· | 0003b1d0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b1e0:·2 | 0003b1e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b1f0:· | 0003b1f0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b200:·20 | 0003b200:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b210:·74 | 0003b210:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b220:· | 0003b220:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b230:· | 0003b230:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b240:· | 0003b240:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b250:· | 0003b250:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 0003b260:· | 0003b260:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | ||
| 0003b270:· | 0003b270:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b280:· | 0003b280:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b290:·2d | 0003b290:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b2a0:· | 0003b2a0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b2b0:· | 0003b2b0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b2c0:· | 0003b2c0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b2d0:· | 0003b2d0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b2e0:·2020·202 | 0003b2e0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b2f0:· | 0003b2f0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b300:· | 0003b300:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b310:· | 0003b310:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b320:· | 0003b320:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b330:· | 0003b330:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b340:· | 0003b340:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b350:· | 0003b350:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b360:· | 0003b360:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b370:·6 | 0003b370:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b380:· | 0003b380:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b390:·2 | 0003b390:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b3a0:· | 0003b3a0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b3b0:· | 0003b3b0:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b3c0:· | 0003b3c0:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003b3d0:·6 | 0003b3d0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003b3e0:· | 0003b3e0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003b3f0:·65 | 0003b3f0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003b400:·6 | 0003b400:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003b410:· | 0003b410:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003b420:· | 0003b420:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003b430:·3 | 0003b430:·636d·643a·2079·756d·2072·6569·6e73·7461··cmd:·yum·reinsta | ||
| 0003b440:·6 | 0003b440:·6c6c·202d·790a·2020·7768·656e·3a0a·2020··ll·-y.··when:.·· | ||
| 0003b450:· | 0003b450:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003b460:· | 0003b460:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b470:· | 0003b470:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003b480:· | 0003b480:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003b490:· | 0003b490:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b4a0:· | 0003b4a0:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003b4b0:·6 | 0003b4b0:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003b4c0:· | 0003b4c0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b4d0:· | 0003b4d0:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003b4e0:·6 | 0003b4e0:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003b4f0:· | 0003b4f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b500:·6 | 0003b500:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003b510:·616e· | 0003b510:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003b520:· | 0003b520:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003b530:· | 0003b530:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003b540:· | 0003b540:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003b550:·7 | 0003b550:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003b560:· | 0003b560:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b570:· | 0003b570:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0003b580:· | 0003b580:·4f4c·3037·2d30·302d·3031·3030·3230·0a20··OL07-00-010020.· | ||
| 0003b590:· | 0003b590:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b5a0:·3 | 0003b5a0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b5b0:· | 0003b5b0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b5c0:· | 0003b5c0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b5d0:·3 | 0003b5d0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b5e0:·3 | 0003b5e0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b5f0:·2 | 0003b5f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b600:· | 0003b600:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b610:· | 0003b610:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b620:· | 0003b620:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b630:· | 0003b630:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b640:· | 0003b640:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b650:· | 0003b650:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b660:· | 0003b660:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b670:·3 | 0003b670:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b680:· | 0003b680:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b690:· | 0003b690:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b6a0:· | 0003b6a0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b6b0:·2 | 0003b6b0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003b6c0:· | 0003b6c0:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003b6d0:· | 0003b6d0:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003b6e0:· | 0003b6e0:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003b6f0:· | 0003b6f0:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003b700:· | 0003b700:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003b710:· | 0003b710:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003b720:· | 0003b720:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | ||
| 0003b730:·2 | 0003b730:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b740:· | 0003b740:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b750:· | 0003b750:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b760:· | 0003b760:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | ||
| 0003b770:·2 | 0003b770:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003b780:·2 | 0003b780:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003b790:· | 0003b790:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b7a0:·6 | 0003b7a0:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003b7b0:·7 | 0003b7b0:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003b7c0:· | 0003b7c0:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b7d0:·202 | 0003b7d0:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003b7e0:·6 | 0003b7e0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b7f0:· | 0003b7f0:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003b800:· | 0003b800:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| Max diff block lines reached; 9455005/9511475 bytes (99.41%) of diff not shown. | |||
| Offset 95, 33 lines modified | Offset 95, 14 lines modified | ||
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 104 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 107 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 108 | ··package_facts: |
| Offset 294, 14 lines modified | Offset 275, 33 lines modified | ||
| 294 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 295 | ··-·high_complexity | 276 | ··-·high_complexity |
| 296 | ··-·high_severity | 277 | ··-·high_severity |
| 297 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 298 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 299 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 300 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 296 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 303 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 297 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 304 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 298 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 305 | $·rpm·-qf·FILENAME | 299 | $·rpm·-qf·FILENAME |
| 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 324, 50 lines modified | Offset 324, 14 lines modified | ||
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 336 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 337 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 338 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 339 | declare·-A·SETPERMS_RPM_DICT | ||
| 340 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 341 | #·is·expected·by·the·RPM·database | ||
| 342 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 343 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 344 | do | ||
| 345 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 346 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 347 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 348 | ········do | ||
| 349 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 350 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 351 | ········done | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 367 | -·name:·Gather·the·package·facts | 336 | -·name:·Gather·the·package·facts |
| 368 | ··package_facts: | 337 | ··package_facts: |
| Offset 483, 14 lines modified | Offset 447, 50 lines modified | ||
| 483 | ··-·PCI-DSSv4-11.5.2 | 447 | ··-·PCI-DSSv4-11.5.2 |
| 484 | ··-·high_complexity | 448 | ··-·high_complexity |
| 485 | ··-·high_severity | 449 | ··-·high_severity |
| 486 | ··-·medium_disruption | 450 | ··-·medium_disruption |
| 487 | ··-·no_reboot_needed | 451 | ··-·no_reboot_needed |
| 488 | ··-·restrict_strategy | 452 | ··-·restrict_strategy |
| 489 | ··-·rpm_verify_permissions | 453 | ··-·rpm_verify_permissions |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 776289/783850 bytes (99.04%) of diff not shown. | |||
| Offset 15172, 419 lines modified | Offset 15172, 419 lines modified | ||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | ||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20· | 0003b4a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b4b0:·6c20·736 | 0003b4b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b4c0:·3c62 | 0003b4c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b4d0:·7 | 0003b4d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b4e0:·6 | 0003b4e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b4f0:· | 0003b4f0:·6964·6d35·3331·3022·3e3c·7461·626c·6520··idm5310"><table· | ||
| 0003b500:· | 0003b500:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b510:· | 0003b510:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b520:· | 0003b520:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b530:· | 0003b530:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b540:·7 | 0003b540:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b550:· | 0003b550:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b560:· | 0003b560:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b570:·7 | 0003b570:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b580:·3 | 0003b580:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b590:· | 0003b590:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b5a0:· | 0003b5a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b5b0:·7 | 0003b5b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b5c0:· | 0003b5c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b5d0:·6 | 0003b5d0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b5e0:· | 0003b5e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b5f0:· | 0003b5f0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003b600:· | 0003b600:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003b610:·6 | 0003b610:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003b620:· | 0003b620:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003b630:·6 | 0003b630:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003b640:· | 0003b640:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b650:· | 0003b650:·2e34·2e31·0a20·202d·2044·4953·412d·5354··.4.1.··-·DISA-ST | ||
| 0003b660:· | 0003b660:·4947·2d4f·4c30·372d·3030·2d30·3130·3032··IG-OL07-00-01002 | ||
| 0003b670:· | 0003b670:·300a·2020·2d20·4e49·5354·2d38·3030·2d31··0.··-·NIST-800-1 | ||
| 0003b680:· | 0003b680:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003b690:· | 0003b690:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003b6a0:·20 | 0003b6a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b6b0:· | 0003b6b0:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003b6c0:·2 | 0003b6c0:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003b6d0:· | 0003b6d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b6e0:· | 0003b6e0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003b6f0:· | 0003b6f0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003b700:· | 0003b700:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b710:· | 0003b710:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003b720:· | 0003b720:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003b730:· | 0003b730:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003b740:· | 0003b740:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003b750:· | 0003b750:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003b760:·6 | 0003b760:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003b770:· | 0003b770:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003b780:· | 0003b780:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003b790:· | 0003b790:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003b7a0:· | 0003b7a0:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003b7b0:·7 | 0003b7b0:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003b7c0:·2 | 0003b7c0:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003b7d0:·6 | 0003b7d0:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003b7e0:· | 0003b7e0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b7f0:·6d | 0003b7f0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b800:·6 | 0003b800:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b810:· | 0003b810:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b820:·67 | 0003b820:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b830:· | 0003b830:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b840:· | 0003b840:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b850:·6 | 0003b850:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003b860:· | 0003b860:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003b870:· | 0003b870:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b880:· | 0003b880:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003b890:· | 0003b890:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b8a0:·7 | 0003b8a0:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003b8b0:·6 | 0003b8b0:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003b8c0:· | 0003b8c0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b8d0:·6 | 0003b8d0:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003b8e0:· | 0003b8e0:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003b8f0:· | 0003b8f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b900:· | 0003b900:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003b910:· | 0003b910:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| 0003b920:·7 | 0003b920:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003b930:· | 0003b930:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003b940:·2 | 0003b940:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003b950:·6 | 0003b950:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003b960:·6 | 0003b960:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b970:· | 0003b970:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | ||
| 0003b980:· | 0003b980:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | ||
| 0003b990:· | 0003b990:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | ||
| 0003b9a0:· | 0003b9a0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b9b0:· | 0003b9b0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b9c0:· | 0003b9c0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b9d0:· | 0003b9d0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b9e0:· | 0003b9e0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b9f0:·2 | 0003b9f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba00:·3 | 0003ba00:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003ba10:· | 0003ba10:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003ba20:· | 0003ba20:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba30:· | 0003ba30:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003ba40:· | 0003ba40:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003ba50:· | 0003ba50:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003ba60:· | 0003ba60:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003ba70:· | 0003ba70:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003ba80:·6 | 0003ba80:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003ba90:· | 0003ba90:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003baa0:· | 0003baa0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bab0:· | 0003bab0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bac0:· | 0003bac0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bad0:· | 0003bad0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bae0:· | 0003bae0:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003baf0:· | 0003baf0:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bb00:·5 | 0003bb00:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003bb10:· | 0003bb10:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003bb20:· | 0003bb20:·616c·6c20·636f·6d6d·616e·6420·287a·7970··all·command·(zyp | ||
| 0003bb30:· | 0003bb30:·7065·7229·270a·2020·7365·745f·6661·6374··per)'.··set_fact | ||
| 0003bb40:· | 0003bb40:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003bb50:· | 0003bb50:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003bb60:· | 0003bb60:·636d·643a·207a·7970·7065·7220·696e·202d··cmd:·zypper·in·- | ||
| 0003bb70:· | 0003bb70:·6620·2d79·0a20·2077·6865·6e3a·0a20·202d··f·-y.··when:.··- | ||
| 0003bb80:·2 | 0003bb80:·206e·6f74·2028·2022·6b65·726e·656c·2220···not·(·"kernel"· | ||
| 0003bb90:· | 0003bb90:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bba0:· | 0003bba0:·2e70·6163·6b61·6765·7320·616e·6420·2272··.packages·and·"r | ||
| 0003bbb0:· | 0003bbb0:·706d·2d6f·7374·7265·6522·2069·6e20·616e··pm-ostree"·in·an | ||
| 0003bbc0:· | 0003bbc0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bbd0:·6 | 0003bbd0:·6167·6573·0a20·2020·2061·6e64·2022·626f··ages.····and·"bo | ||
| 0003bbe0:· | 0003bbe0:·6f74·6322·2069·6e20·616e·7369·626c·655f··otc"·in·ansible_ | ||
| 0003bbf0:· | 0003bbf0:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003bc00:· | 0003bc00:·6e64·206e·6f74·2022·6f70·656e·7368·6966··nd·not·"openshif | ||
| Max diff block lines reached; 21846984/21903454 bytes (99.74%) of diff not shown. | |||
| Offset 15191, 418 lines modified | Offset 15191, 418 lines modified | ||
| 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | ||
| 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (404 lines added, 404 lines removed) | |
| 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b5d0:· | 0003b5d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b5e0:·3c2f | 0003b5e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b5f0:· | 0003b5f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b600:·7365 | 0003b600:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b610:·2269 | 0003b610:·6964·3d22·6964·6d35·3331·3022·3e3c·7461··id="idm5310"><ta | ||
| 0003b620:·6 | 0003b620:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b630:· | 0003b630:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b640:· | 0003b640:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b650:· | 0003b650:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b660:· | 0003b660:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b670:· | 0003b670:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b680:· | 0003b680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b690:· | 0003b690:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b6a0:· | 0003b6a0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b6b0:·3 | 0003b6b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b6c0:· | 0003b6c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b6d0:·3 | 0003b6d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b6e0:· | 0003b6e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b6f0:·6 | 0003b6f0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b700:· | 0003b700:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b710:· | 0003b710:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b720:·6 | 0003b720:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003b730:·6 | 0003b730:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003b740:·6 | 0003b740:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003b750:· | 0003b750:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003b760:· | 0003b760:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0003b770:· | 0003b770:·352e·3130·2e34·2e31·0a20·202d·2044·4953··5.10.4.1.··-·DIS | ||
| 0003b780:· | 0003b780:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | ||
| 0003b790:· | 0003b790:·3130·3032·300a·2020·2d20·4e49·5354·2d38··10020.··-·NIST-8 | ||
| 0003b7a0:· | 0003b7a0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b7b0:· | 0003b7b0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b7c0:·3 | 0003b7c0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b7d0:·2 | 0003b7d0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b7e0:· | 0003b7e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b7f0:· | 0003b7f0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b800:· | 0003b800:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b810:· | 0003b810:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b820:· | 0003b820:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b830:·2 | 0003b830:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b840:· | 0003b840:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b850:· | 0003b850:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b860:·2 | 0003b860:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b870:· | 0003b870:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b880:·6 | 0003b880:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b890:· | 0003b890:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b8a0:· | 0003b8a0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b8b0:·7 | 0003b8b0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b8c0:· | 0003b8c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b8d0:· | 0003b8d0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b8e0:· | 0003b8e0:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b8f0:· | 0003b8f0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b900:· | 0003b900:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b910:· | 0003b910:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b920:· | 0003b920:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b930:· | 0003b930:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b940:· | 0003b940:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b950:·6 | 0003b950:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7975··einstall_cmd:·yu | ||
| 0003b960:· | 0003b960:·6d20·7265·696e·7374·616c·6c20·2d79·0a20··m·reinstall·-y.· | ||
| 0003b970:· | 0003b970:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b980:·20 | 0003b980:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b990:·6 | 0003b990:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b9a0:·6765·7 | 0003b9a0:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b9b0:· | 0003b9b0:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b9c0:· | 0003b9c0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b9d0:· | 0003b9d0:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b9e0:· | 0003b9e0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b9f0:·7 | 0003b9f0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003ba00:·2 | 0003ba00:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003ba10:· | 0003ba10:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003ba20:· | 0003ba20:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003ba30:·20 | 0003ba30:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003ba40:· | 0003ba40:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003ba50:·20 | 0003ba50:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003ba60:·6 | 0003ba60:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003ba70:· | 0003ba70:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003ba80:· | 0003ba80:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003ba90:· | 0003ba90:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | ||
| 0003baa0:· | 0003baa0:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | ||
| 0003bab0:· | 0003bab0:·2d30·3130·3032·300a·2020·2d20·4e49·5354··-010020.··-·NIST | ||
| 0003bac0:· | 0003bac0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003bad0:· | 0003bad0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003bae0:· | 0003bae0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003baf0:·3 | 0003baf0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003bb00:· | 0003bb00:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bb10:· | 0003bb10:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003bb20:·3 | 0003bb20:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003bb30:· | 0003bb30:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bb40:·2 | 0003bb40:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003bb50:·3 | 0003bb50:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003bb60:· | 0003bb60:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bb70:· | 0003bb70:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003bb80:·6 | 0003bb80:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003bb90:· | 0003bb90:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003bba0:·20 | 0003bba0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003bbb0:· | 0003bbb0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003bbc0:· | 0003bbc0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003bbd0:·3 | 0003bbd0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003bbe0:· | 0003bbe0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003bbf0:·2d20· | 0003bbf0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003bc00:· | 0003bc00:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003bc10:· | 0003bc10:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003bc20:· | 0003bc20:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003bc30:·36 | 0003bc30:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003bc40:· | 0003bc40:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | ||
| 0003bc50:·2 | 0003bc50:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | ||
| 0003bc60:·370a·2020·2 | 0003bc60:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003bc70:· | 0003bc70:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003bc80:· | 0003bc80:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | ||
| 0003bc90:· | 0003bc90:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | ||
| 0003bca0:· | 0003bca0:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003bcb0:· | 0003bcb0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003bcc0:·6 | 0003bcc0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003bcd0:· | 0003bcd0:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003bce0:· | 0003bce0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bcf0:·7 | 0003bcf0:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003bd00:· | 0003bd00:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003bd10:· | 0003bd10:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bd20:·6 | 0003bd20:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003bd30:·7 | 0003bd30:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| Max diff block lines reached; 21828048/21884380 bytes (99.74%) of diff not shown. | |||
| Offset 15058, 222 lines modified | Offset 15058, 222 lines modified | ||
| 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | ||
| 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003ad90:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ada0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003adb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003adc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003add0:·3d22·6964·6d35·3639·3622·3e3c·7461·626c··="idm5696"><tabl | |||
| 0003ade0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003adf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ae30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ad90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ada0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003adb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003adc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003add0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ade0:·3639·3622·3e3c·7072·653e·3c63·6f64·653e··696"><pre><code> | |||
| 0003adf0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae00:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ae10:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae20:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ae30:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ae40:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae50:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ae60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ae70:·3536·3937·2220·7461·6269·6e64·6578·3d22··5697"·tabindex=" | |||
| 0003ae80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ae90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003aea0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003aeb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003aec0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003aed0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003aee0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aef0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af00:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af10:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003af20:·3937·223e·3c74·6162·6c65·2063·6c61·7373··97"><table·class | |||
| 0003af30:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af40:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af50:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003af60:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af70:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a | 0003ae60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003a | 0003ae70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003ae80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ae90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003aea0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003aeb0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003aec0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003aed0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003aee0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003aef0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af00:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003af10:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003af20:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003af30:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003af40:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003af50:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003af60:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003af70:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003af80:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003af90:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003afa0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003afb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003afc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003afd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003afe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003aff0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b000:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b010:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b020:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b030:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b040:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b050:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b060:·6865·6e3a·2028·226b·6572·6e65·6c22·2069··hen:·("kernel"·i | |||
| 0003b070:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b080:·7061·636b·6167·6573·206f·7220·226b·6572··packages·or·"ker | |||
| 0003b090:·6e65·6c2d·7565·6b22·2069·6e20·616e·7369··nel-uek"·in·ansi | |||
| 0003b0a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b0b0:·6573·290a·2020·7461·6773·3a0a·2020·2d20··es).··tags:.··-· | |||
| 0003b0c0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b0d0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003b0e0:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003b0f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b100:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b110:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b120:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b130:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b140:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b150:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b160:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b170:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b180:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b190:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b1a0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b1b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b1d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b1e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b200:·6d35·3639·3722·2074·6162·696e·6465·783d··m5697"·tabindex= | |||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b260:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b270:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b280:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b290:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2b0:·6522·2069·643d·2269·646d·3536·3937·223e··e"·id="idm5697"> | |||
| 0003b2c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b2d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b2e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b2f0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b300:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| Max diff block lines reached; 22992866/23022150 bytes (99.87%) of diff not shown. | |||
| Offset 15064, 221 lines modified | Offset 15064, 221 lines modified | ||
| 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ade0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003adf0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ae00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ae10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ae20:·2069·643d·2269·646d·3536·3936·223e·3c74···id="idm5696"><t | |||
| 0003ae30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ae40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aea0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ade0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003adf0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ae00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae30:·646d·3536·3936·223e·3c70·7265·3e3c·636f··dm5696"><pre><co | |||
| 0003ae40:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae50:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae60:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae70:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae80:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae90:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003aea0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003aeb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003aec0:·6964·6d35·3639·3722·2074·6162·696e·6465··idm5697"·tabinde | |||
| 0003aed0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aee0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aef0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003af00:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003af10:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003af20:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003af30:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af40:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af50:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af60:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af70:·6d35·3639·3722·3e3c·7461·626c·6520·636c··m5697"><table·cl | |||
| 0003af80:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af90:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003afa0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003afb0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003afc0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003aeb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003a | 0003aec0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003aed0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003aee0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aef0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003af00:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003af10:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003af20:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003af30:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003af40:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003af50:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003af60:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003af70:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003af80:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003af90:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003afa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003afb0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003afc0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003afd0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003afe0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003aff0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b000:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b010:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b020:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b030:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b040:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b050:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b060:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b070:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b080:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b090:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b0a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b0b0:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b0c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b0d0:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b0e0:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b0f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b100:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b110:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b120:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b130:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003b140:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b150:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b160:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b170:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b180:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b190:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b1a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b1b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b1c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b1d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b1e0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b1f0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b200:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b210:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b220:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b230:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b240:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b250:·2369·646d·3536·3937·2220·7461·6269·6e64··#idm5697"·tabind | |||
| 0003b260:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b270:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b280:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b290:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b2a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b2c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b2d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b2e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b300:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b310:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b320:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b330:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b340:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b350:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b360:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| Max diff block lines reached; 23299247/23328393 bytes (99.88%) of diff not shown. | |||
| Offset 15054, 221 lines modified | Offset 15054, 221 lines modified | ||
| 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | ||
| 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ad40:·656d·6564·6961·7469·6f6e·204 | 0003ad40:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003ad50:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad90:·646d·3536·3936·223e·3c74·6162·6c65·2063··dm5696"><table·c | |||
| 0003ada0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003adb0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003adc0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003add0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ade0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003adf0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ae00:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad50:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ad60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ad70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad90:·7073·6522·2069·643d·2269·646d·3536·3936··pse"·id="idm5696 | |||
| 0003ada0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003adb0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003adc0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003add0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ade0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003adf0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ae00:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ae10:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ae20:·2d74·6172·6765·743d·2223·6964·6d35·3639··-target="#idm569 | |||
| 0003ae30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 0003ae40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ae50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ae60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ae70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ae80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ae90:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003aea0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003aeb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003aec0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003aed0:·7365·2220·6964·3d22·6964·6d35·3639·3722··se"·id="idm5697" | |||
| 0003aee0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003aef0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003af10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003af20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003a | 0003ae10:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003a | 0003ae20:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003a | 0003ae30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003ae40:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ae50:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae60:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003ae80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae90:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003aea0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003aeb0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003aec0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003aed0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aee0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003aef0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003af00:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003af10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003af40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003af50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003af60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003af70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003af80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003af90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003afa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003afb0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003afc0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003afd0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003afe0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003aff0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b000:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b010:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b020:·3a20·2822·6b65·726e·656c·2220·696e·2061··:·("kernel"·in·a | |||
| 0003b030:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b040:·6b61·6765·7320·6f72·2022·6b65·726e·656c··kages·or·"kernel | |||
| 0003b050:·2d75·656b·2220·696e·2061·6e73·6962·6c65··-uek"·in·ansible | |||
| 0003b060:·5f66·6163·7473·2e70·6163·6b61·6765·7329··_facts.packages) | |||
| 0003b070:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b080:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b090:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b0a0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b0b0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b0c0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b0d0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b0e0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b0f0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b100:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b110:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b120:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b130:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b140:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b150:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b160:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b170:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b180:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b190:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b1a0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b1b0:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b1c0:·3937·2220·7461·6269·6e64·6578·3d22·3022··97"·tabindex="0" | |||
| 0003b1d0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1e0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b1f0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b200:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b210:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b220:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b230:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b240:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b250:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b260:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b270:·6964·3d22·6964·6d35·3639·3722·3e3c·7072··id="idm5697"><pr | |||
| 0003b280:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b290:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b2a0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b2b0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b2c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| Max diff block lines reached; 9995026/10024172 bytes (99.71%) of diff not shown. | |||
| Offset 115, 53 lines modified | Offset 115, 14 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····yum·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 162 | ··package_facts: | 128 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 153, 53 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 155 | ··-·low_complexity |
| 195 | ··-·low_disruption | 156 | ··-·low_disruption |
| 196 | ··-·medium_severity | 157 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 171 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 172 | ····yum·install·-y·"aide" | ||
| 173 | fi | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 225, 28 lines modified | Offset 225, 14 lines modified | ||
| 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 234 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 235 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 236 | ····yum·install·-y·"aide" | ||
| 237 | fi | ||
| 238 | /usr/sbin/aide·--init | ||
| 239 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 240 | else | ||
| Max diff block lines reached; 1079432/1084443 bytes (99.54%) of diff not shown. | |||
| Offset 14725, 228 lines modified | Offset 14725, 228 lines modified | ||
| 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | ||
| 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000398b0:·656d·6564·6961·7469·6f6e·204 | 000398b0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 000398c0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 000398d0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 000398e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 000398f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039900:·7073·6522·2069·643d·2269·646d·3130·3539··pse"·id="idm1059 | |||
| 00039910:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 00039 | 000398c0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 000398d0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000398e0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000398f0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039900:·646d·3130·3539·3722·3e3c·7461·626c·6520··dm10597"><table· | |||
| 00039910:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039920:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039930:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039940:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039950:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039960:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039970:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039980:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039990:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000399a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000399b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 000399c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000399d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 000399e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 000399f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039a00:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 00039a10:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 00039a20:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 00039a30:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 00039a40:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 00039a50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 00039a60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00039a70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00039a80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00039a90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00039aa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00039ab0:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 00039ac0:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 00039ad0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 00039 | 00039ae0:·7572·6520·646e·662d·6175·746f·6d61·7469··ure·dnf-automati | ||
| 00039940:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039950:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039960:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039970:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039 | 00039af0:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | ||
| 00039b00:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00039b10:·6d65·3a20·646e·662d·6175·746f·6d61·7469··me:·dnf-automati | |||
| 00039b20:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 00039b30:·7365·6e74·0a20·2077·6865·6e3a·206e·6f74··sent.··when:·not | |||
| 00039b40:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | |||
| 00039b50:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 00039b60:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | |||
| 00039b70:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | |||
| 00039b80:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00039b90:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | |||
| 00039ba0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00039bb0:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | |||
| 00039bc0:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | |||
| 00039bd0:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | |||
| 00039be0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00039bf0:·0a20·2020·2029·0a20·2074·6167·733a·0a20··.····).··tags:.· | |||
| 00039c00:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00039c10:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00039c20:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00039c30:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00039c40:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00039c50:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00039c60:·640a·2020·2d20·7061·636b·6167·655f·646e··d.··-·package_dn | |||
| 00039c70:·662d·6175·746f·6d61·7469·635f·696e·7374··f-automatic_inst | |||
| 00039c80:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00039c90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00039ca0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00039 | 00039cb0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 000399a0:·743d·2223·6964·6d31·3035·3938·2220·7461··t="#idm10598"·ta | |||
| 000399b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000399c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000399d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000399e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000399f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00039 | 00039cc0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 00039cd0:·7461·7267·6574·3d22·2369·646d·3130·3539··target="#idm1059 | |||
| 00039ce0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 00039cf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00039d00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00039d10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00039d20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00039d30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00039d40:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00039 | 00039d50:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 00039 | 00039d60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039d70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039d80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039 | 00039d90:·643d·2269·646d·3130·3539·3822·3e3c·7072··d="idm10598"><pr | ||
| 00039da0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00039db0:·6765·735d·5d0a·6e61·6d65·203d·2022·646e··ges]].name·=·"dn | |||
| 00039dc0:·662d·6175·746f·6d61·7469·6322·0a76·6572··f-automatic".ver | |||
| 00039dd0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00039a60:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00039a70:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00039a80:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00039a90:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00039aa0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00039ab0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039ac0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039ad0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039ae0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039af0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039b00:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039b10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039b20:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039b30:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039b40:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039b50:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 00039b60:·7461·6c6c·5f64·6e66·2d61·7574·6f6d·6174··tall_dnf-automat | |||
| 00039b70:·6963·0a0a·636c·6173·7320·696e·7374·616c··ic..class·instal | |||
| 00039b80:·6c5f·646e·662d·6175·746f·6d61·7469·6320··l_dnf-automatic· | |||
| 00039b90:·7b0a·2020·7061·636b·6167·6520·7b20·2764··{.··package·{·'d | |||
| 00039ba0:·6e66·2d61·7574·6f6d·6174·6963·273a·0a20··nf-automatic':.· | |||
| Max diff block lines reached; 3832097/3862209 bytes (99.22%) of diff not shown. | |||
| Offset 81, 54 lines modified | Offset 81, 14 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | [[packages]] | ||
| 90 | name·=·"dnf-automatic" | ||
| 91 | version·=·"*" | ||
| 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | include·install_dnf-automatic | ||
| 98 | class·install_dnf-automatic·{ | ||
| 99 | ··package·{·'dnf-automatic': | ||
| 100 | ····ensure·=>·'installed', | ||
| 101 | ··} | ||
| 102 | } | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 110 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 111 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 112 | ····yum·install·-y·"dnf-automatic" | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=dnf-automatic | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 93 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 94 | ··package_facts: |
| Offset 152, 14 lines modified | Offset 112, 54 lines modified | ||
| 152 | ··tags: | 112 | ··tags: |
| 153 | ··-·enable_strategy | 113 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 114 | ··-·low_complexity |
| 155 | ··-·low_disruption | 115 | ··-·low_disruption |
| 156 | ··-·medium_severity | 116 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 117 | ··-·no_reboot_needed |
| 158 | ··-·package_dnf-automatic_installed | 118 | ··-·package_dnf-automatic_installed |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"dnf-automatic" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 130 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 132 | ····yum·install·-y·"dnf-automatic" | ||
| 133 | fi | ||
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | include·install_dnf-automatic | ||
| 143 | class·install_dnf-automatic·{ | ||
| 144 | ··package·{·'dnf-automatic': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | } | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=dnf-automatic | ||
| 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 155 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 161 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 156 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 162 | automatic.conf. | 157 | automatic.conf. |
| 163 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 158 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 164 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 159 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 165 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 160 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 169, 14 lines modified | Offset 169, 54 lines modified | ||
| 169 | Severity: ··medium | 169 | Severity: ··medium |
| 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 175 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 175 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 181 | -·name:·Gather·the·package·facts | ||
| 182 | ··package_facts: | ||
| 183 | ····manager:·auto | ||
| 184 | ··tags: | ||
| 185 | ··-·NIST-800-53-CM-6(a) | ||
| Max diff block lines reached; 253163/259212 bytes (97.67%) of diff not shown. | |||
| Offset 15098, 221 lines modified | Offset 15098, 221 lines modified | ||
| 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b000:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b010:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b020:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b030:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b040:·6522·2069·643d·2269·646d·3536·3936·223e··e"·id="idm5696"> | |||
| 0003b050:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b060:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b070:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b080:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b090:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b0a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b000:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b010:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b020:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b030:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b040:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b050:·2269·646d·3536·3936·223e·3c70·7265·3e3c··"idm5696"><pre>< | |||
| 0003b060:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b070:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b080:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b090:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b0a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b0b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b0c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b0d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b0e0:·2223·6964·6d35·3639·3722·2074·6162·696e··"#idm5697"·tabin | |||
| 0003b0f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b100:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b110:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b120:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b130:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b140:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b150:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b190:·6964·6d35·3639·3722·3e3c·7461·626c·6520··idm5697"><table· | |||
| 0003b1a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b0d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b0e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b0f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b100:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b110:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b120:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b130:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b140:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b150:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b160:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b170:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b180:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b190:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b1a0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1b0:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b1c0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b1d0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b1e0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b1f0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b200:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b210:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b220:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b230:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b240:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b250:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b260:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b270:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b280:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b290:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b2a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b2b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b2c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b2d0:·740a·2020·7768·656e·3a20·2822·6b65·726e··t.··when:·("kern | |||
| 0003b2e0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b2f0:·6163·7473·2e70·6163·6b61·6765·7320·6f72··acts.packages·or | |||
| 0003b300:·2022·6b65·726e·656c·2d75·656b·2220·696e···"kernel-uek"·in | |||
| 0003b310:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b320:·6163·6b61·6765·7329·0a20·2074·6167·733a··ackages).··tags: | |||
| 0003b330:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b340:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b350:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b360:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b370:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b380:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b390:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b3a0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b3b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b400:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b410:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b420:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b430:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b440:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b450:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b460:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b470:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b480:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b490:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b4a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b4d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b4e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b4f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b520:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b530:·3639·3722·3e3c·7072·653e·3c63·6f64·653e··697"><pre><code> | |||
| 0003b540:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b550:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b560:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b570:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b580:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| Max diff block lines reached; 9784551/9813697 bytes (99.70%) of diff not shown. | |||
| Offset 108, 53 lines modified | Offset 108, 14 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | include·install_aide | ||
| 125 | class·install_aide·{ | ||
| 126 | ··package·{·'aide': | ||
| 127 | ····ensure·=>·'installed', | ||
| 128 | ··} | ||
| 129 | } | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 136 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 137 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 138 | ····yum·install·-y·"aide" | ||
| 139 | fi | ||
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 155 | ··package_facts: | 121 | ··package_facts: |
| Offset 185, 14 lines modified | Offset 146, 53 lines modified | ||
| 185 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 186 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 187 | ··-·low_complexity | 148 | ··-·low_complexity |
| 188 | ··-·low_disruption | 149 | ··-·low_disruption |
| 189 | ··-·medium_severity | 150 | ··-·medium_severity |
| 190 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 191 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····yum·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_aide | ||
| 176 | class·install_aide·{ | ||
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 192 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 193 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 194 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 195 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 208, 27 lines modified | Offset 208, 14 lines modified | ||
| 208 | ············_\x8i_\x8s_\x8m······1446 | 208 | ············_\x8i_\x8s_\x8m······1446 |
| 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 218 | fips-mode-setup·--enable | ||
| 219 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 220 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 221 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 222 | fi | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| Max diff block lines reached; 1184713/1190479 bytes (99.52%) of diff not shown. | |||
| Offset 15137, 408 lines modified | Offset 15137, 408 lines modified | ||
| 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | ||
| 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b270:·6564·6961·7469·6f6e·20 | 0003b270:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b280:· | 0003b280:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b290:·3e3c | 0003b290:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b2a0:· | 0003b2a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b2b0:·6170 | 0003b2b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b2c0:·3 | 0003b2c0:·3533·3539·223e·3c74·6162·6c65·2063·6c61··5359"><table·cla | ||
| 0003b2d0:· | 0003b2d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b2e0:·7 | 0003b2e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b2f0:· | 0003b2f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b300:· | 0003b300:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b310:· | 0003b310:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b320:· | 0003b320:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b330:· | 0003b330:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b340:·7 | 0003b340:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b350:· | 0003b350:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b360:· | 0003b360:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b370:·6 | 0003b370:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b380:· | 0003b380:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b390:· | 0003b390:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b3a0:·65 | 0003b3a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b3b0:· | 0003b3b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b3c0:·6 | 0003b3c0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b3d0:·6 | 0003b3d0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b3e0:· | 0003b3e0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b3f0:· | 0003b3f0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b400:·7 | 0003b400:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b410:·2 | 0003b410:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b420:· | 0003b420:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003b430:· | 0003b430:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003b440:· | 0003b440:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003b450:·2 | 0003b450:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b460:· | 0003b460:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003b470:· | 0003b470:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003b480:·2 | 0003b480:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b490:· | 0003b490:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003b4a0:· | 0003b4a0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003b4b0:· | 0003b4b0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b4c0:· | 0003b4c0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003b4d0:· | 0003b4d0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003b4e0:· | 0003b4e0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003b4f0:· | 0003b4f0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003b500:· | 0003b500:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003b510:·6 | 0003b510:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003b520:·6 | 0003b520:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003b530:· | 0003b530:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003b540:· | 0003b540:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003b550:· | 0003b550:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003b560:·7 | 0003b560:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003b570:·2 | 0003b570:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003b580:· | 0003b580:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003b590:· | 0003b590:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b5a0:· | 0003b5a0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b5b0:· | 0003b5b0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b5c0:· | 0003b5c0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b5d0:·6 | 0003b5d0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b5e0:· | 0003b5e0:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b5f0:·6 | 0003b5f0:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b600:·6 | 0003b600:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003b610:· | 0003b610:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003b620:· | 0003b620:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b630:·6 | 0003b630:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003b640:·206 | 0003b640:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b650:· | 0003b650:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003b660:· | 0003b660:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003b670:· | 0003b670:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b680:· | 0003b680:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003b690:· | 0003b690:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003b6a0:· | 0003b6a0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b6b0:· | 0003b6b0:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003b6c0:· | 0003b6c0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| 0003b6d0:· | 0003b6d0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003b6e0:· | 0003b6e0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003b6f0:· | 0003b6f0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003b700:·6 | 0003b700:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003b710:·61 | 0003b710:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b720:· | 0003b720:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b730:· | 0003b730:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b740:· | 0003b740:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b750:· | 0003b750:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b760:·3 | 0003b760:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b770:· | 0003b770:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b780:· | 0003b780:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b790:· | 0003b790:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b7a0:· | 0003b7a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b7b0:· | 0003b7b0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b7c0:·3 | 0003b7c0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b7d0:· | 0003b7d0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b7e0:· | 0003b7e0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b7f0:·7 | 0003b7f0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b800:· | 0003b800:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b810:·686 | 0003b810:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b820:· | 0003b820:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b830:· | 0003b830:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b840:· | 0003b840:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b850:· | 0003b850:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b860:·2 | 0003b860:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b870:· | 0003b870:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b880:· | 0003b880:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b890:· | 0003b890:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003b8a0:· | 0003b8a0:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003b8b0:· | 0003b8b0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·2028··nstall·command·( | ||
| 0003b8c0:· | 0003b8c0:·7a79·7070·6572·2927·0a20·2073·6574·5f66··zypper)'.··set_f | ||
| 0003b8d0:· | 0003b8d0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b8e0:·5 | 0003b8e0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b8f0:· | 0003b8f0:·6c6c·5f63·6d64·3a20·7a79·7070·6572·2069··ll_cmd:·zypper·i | ||
| 0003b900:·2d | 0003b900:·6e20·2d66·202d·790a·2020·7768·656e·3a0a··n·-f·-y.··when:. | ||
| 0003b910:· | 0003b910:·2020·2d20·6e6f·7420·2820·226b·6572·6e65····-·not·(·"kerne | ||
| 0003b920:· | 0003b920:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | ||
| 0003b930:· | 0003b930:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003b940:·2 | 0003b940:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | ||
| 0003b950:· | 0003b950:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b960:·6 | 0003b960:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | ||
| 0003b970:·2 | 0003b970:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | ||
| 0003b980:·6 | 0003b980:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003b990:·7 | 0003b990:·7320·616e·6420·6e6f·7420·226f·7065·6e73··s·and·not·"opens | ||
| 0003b9a0:· | 0003b9a0:·6869·6674·2d6b·7562·656c·6574·2220·696e··hift-kubelet"·in | ||
| 0003b9b0:·20 | 0003b9b0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b9c0:· | 0003b9c0:·6163·6b61·6765·730a·2020·2020·290a·2020··ackages.····).·· | ||
| 0003b9d0:· | 0003b9d0:·2d20·616e·7369·626c·655f·6469·7374·7269··-·ansible_distri | ||
| Max diff block lines reached; 6444981/6499933 bytes (99.15%) of diff not shown. | |||
| Offset 102, 33 lines modified | Offset 102, 14 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 110 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 111 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·Gather·the·package·facts | 114 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 115 | ··package_facts: |
| Offset 295, 14 lines modified | Offset 276, 33 lines modified | ||
| 295 | ··-·PCI-DSSv4-11.5.2 | 276 | ··-·PCI-DSSv4-11.5.2 |
| 296 | ··-·high_complexity | 277 | ··-·high_complexity |
| 297 | ··-·high_severity | 278 | ··-·high_severity |
| 298 | ··-·medium_disruption | 279 | ··-·medium_disruption |
| 299 | ··-·no_reboot_needed | 280 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 281 | ··-·restrict_strategy |
| 301 | ··-·rpm_verify_hashes | 282 | ··-·rpm_verify_hashes |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 285 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 286 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 287 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 288 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 289 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 290 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 291 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 292 | fi | ||
| 293 | else | ||
| 294 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 295 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 297 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 304 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 298 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 305 | run·the·following·command·to·determine·which·package·owns·it: | 299 | run·the·following·command·to·determine·which·package·owns·it: |
| 306 | $·rpm·-qf·FILENAME | 300 | $·rpm·-qf·FILENAME |
| 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 301 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 308 | $·sudo·rpm·--restore·PACKAGENAME | 302 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 321, 46 lines modified | Offset 321, 14 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 343 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | done | ||
| 346 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 347 | #·correct·values | ||
| 348 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 349 | do | ||
| 350 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 351 | done | ||
| 352 | else | ||
| 353 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 354 | fi | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 360 | -·name:·Gather·the·package·facts | 333 | -·name:·Gather·the·package·facts |
| 361 | ··package_facts: | 334 | ··package_facts: |
| Offset 468, 14 lines modified | Offset 436, 46 lines modified | ||
| 468 | ··-·PCI-DSSv4-11.5.2 | 436 | ··-·PCI-DSSv4-11.5.2 |
| 469 | ··-·high_complexity | 437 | ··-·high_complexity |
| 470 | ··-·high_severity | 438 | ··-·high_severity |
| 471 | ··-·medium_disruption | 439 | ··-·medium_disruption |
| 472 | ··-·no_reboot_needed | 440 | ··-·no_reboot_needed |
| 473 | ··-·restrict_strategy | 441 | ··-·restrict_strategy |
| 474 | ··-·rpm_verify_ownership | 442 | ··-·rpm_verify_ownership |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 687633/695344 bytes (98.89%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b410:·7 | 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b420:·3c64 | 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b430:·6 | 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b440:·7073 | 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b450:· | 0003b450:·3335·3922·3e3c·7461·626c·6520·636c·6173··359"><table·clas | ||
| 0003b460:· | 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b470:·7 | 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b480:· | 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b490:·6 | 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b4a0:· | 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b4c0:· | 0003b4c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b4d0:· | 0003b4d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b4e0:·6 | 0003b4e0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b4f0:· | 0003b4f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b500:· | 0003b500:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b510:·2 | 0003b510:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b520:·7 | 0003b520:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b530:· | 0003b530:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b540:· | 0003b540:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b550:·65 | 0003b550:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003b560:·7 | 0003b560:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003b570:·6 | 0003b570:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003b580:· | 0003b580:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003b590:· | 0003b590:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003b5a0:·20 | 0003b5a0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b5b0:· | 0003b5b0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b5c0:· | 0003b5c0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b5d0:· | 0003b5d0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b5e0:·2 | 0003b5e0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b5f0:· | 0003b5f0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b600:· | 0003b600:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b610:·2 | 0003b610:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b620:· | 0003b620:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b630:· | 0003b630:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b640:· | 0003b640:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b650:·2 | 0003b650:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b660:· | 0003b660:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b670:· | 0003b670:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b680:· | 0003b680:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b690:· | 0003b690:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b6a0:·6 | 0003b6a0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b6b0:·6 | 0003b6b0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b6c0:·6 | 0003b6c0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003b6d0:· | 0003b6d0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003b6e0:· | 0003b6e0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003b6f0:·6 | 0003b6f0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003b700:·2 | 0003b700:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003b710:· | 0003b710:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003b720:· | 0003b720:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b730:·616 | 0003b730:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b740:· | 0003b740:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b750:· | 0003b750:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b760:·6 | 0003b760:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b770:·616 | 0003b770:·616c·6c5f·636d·643a·2079·756d·2072·6569··all_cmd:·yum·rei | ||
| 0003b780:· | 0003b780:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b790:· | 0003b790:·3a0a·2020·2d20·6e6f·7420·2820·226b·6572··:.··-·not·(·"ker | ||
| 0003b7a0:· | 0003b7a0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | ||
| 0003b7b0:· | 0003b7b0:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003b7c0:·6 | 0003b7c0:·6e64·2022·7270·6d2d·6f73·7472·6565·2220··nd·"rpm-ostree"· | ||
| 0003b7d0:·6 | 0003b7d0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b7e0:· | 0003b7e0:·2e70·6163·6b61·6765·730a·2020·2020·616e··.packages.····an | ||
| 0003b7f0:· | 0003b7f0:·6420·2262·6f6f·7463·2220·696e·2061·6e73··d·"bootc"·in·ans | ||
| 0003b800:· | 0003b800:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b810:· | 0003b810:·6765·7320·616e·6420·6e6f·7420·226f·7065··ges·and·not·"ope | ||
| 0003b820:·6 | 0003b820:·6e73·6869·6674·2d6b·7562·656c·6574·2220··nshift-kubelet"· | ||
| 0003b830:·6 | 0003b830:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b840:· | 0003b840:·2e70·6163·6b61·6765·730a·2020·2020·290a··.packages.····). | ||
| 0003b850:·20 | 0003b850:·2020·2d20·616e·7369·626c·655f·6469·7374····-·ansible_dist | ||
| 0003b860:· | 0003b860:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b870:· | 0003b870:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b880:· | 0003b880:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b890:· | 0003b890:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b8a0:· | 0003b8a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b8b0:· | 0003b8b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b8c0:· | 0003b8c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b8d0:· | 0003b8d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b8e0:· | 0003b8e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b8f0:· | 0003b8f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b900:· | 0003b900:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b910:· | 0003b910:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b920:· | 0003b920:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b930:· | 0003b930:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b940:· | 0003b940:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b950:· | 0003b950:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b960:· | 0003b960:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b970:· | 0003b970:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b980:· | 0003b980:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b990:· | 0003b990:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b9a0:·6 | 0003b9a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b9b0:· | 0003b9b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b9c0:· | 0003b9c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b9d0:·7 | 0003b9d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b9e0:· | 0003b9e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b9f0:· | 0003b9f0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003ba00:· | 0003ba00:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003ba10:·5 | 0003ba10:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003ba20:·202 | 0003ba20:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003ba30:· | 0003ba30:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003ba40:· | 0003ba40:·7374·616c·6c20·636f·6d6d·616e·6420·287a··stall·command·(z | ||
| 0003ba50:· | 0003ba50:·7970·7065·7229·270a·2020·7365·745f·6661··ypper)'.··set_fa | ||
| 0003ba60:· | 0003ba60:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003ba70:· | 0003ba70:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003ba80:· | 0003ba80:·6c5f·636d·643a·207a·7970·7065·7220·696e··l_cmd:·zypper·in | ||
| 0003ba90:· | 0003ba90:·202d·6620·2d79·0a20·2077·6865·6e3a·0a20···-f·-y.··when:.· | ||
| 0003baa0:· | 0003baa0:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003bab0:·2 | 0003bab0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bac0:· | 0003bac0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003bad0:· | 0003bad0:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003bae0:·6 | 0003bae0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003baf0:·6 | 0003baf0:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003bb00:· | 0003bb00:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003bb10:·6 | 0003bb10:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bb20:· | 0003bb20:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003bb30:· | 0003bb30:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003bb40:· | 0003bb40:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bb50:·6 | 0003bb50:·636b·6167·6573·0a20·2020·2029·0a20·202d··ckages.····).··- | ||
| 0003bb60:· | 0003bb60:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| Max diff block lines reached; 17330203/17385155 bytes (99.68%) of diff not shown. | |||
| Offset 108, 33 lines modified | Offset 108, 14 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 121 | ··package_facts: |
| Offset 301, 14 lines modified | Offset 282, 33 lines modified | ||
| 301 | ··-·PCI-DSSv4-11.5.2 | 282 | ··-·PCI-DSSv4-11.5.2 |
| 302 | ··-·high_complexity | 283 | ··-·high_complexity |
| 303 | ··-·high_severity | 284 | ··-·high_severity |
| 304 | ··-·medium_disruption | 285 | ··-·medium_disruption |
| 305 | ··-·no_reboot_needed | 286 | ··-·no_reboot_needed |
| 306 | ··-·restrict_strategy | 287 | ··-·restrict_strategy |
| 307 | ··-·rpm_verify_hashes | 288 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 312 | $·rpm·-qf·FILENAME | 306 | $·rpm·-qf·FILENAME |
| 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 50 lines modified | Offset 329, 14 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 372 | -·name:·Gather·the·package·facts | 341 | -·name:·Gather·the·package·facts |
| 373 | ··package_facts: | 342 | ··package_facts: |
| Offset 484, 14 lines modified | Offset 448, 50 lines modified | ||
| 484 | ··-·PCI-DSSv4-11.5.2 | 448 | ··-·PCI-DSSv4-11.5.2 |
| 485 | ··-·high_complexity | 449 | ··-·high_complexity |
| 486 | ··-·high_severity | 450 | ··-·high_severity |
| 487 | ··-·medium_disruption | 451 | ··-·medium_disruption |
| 488 | ··-·no_reboot_needed | 452 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 453 | ··-·restrict_strategy |
| 490 | ··-·rpm_verify_permissions | 454 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1342325/1350409 bytes (99.40%) of diff not shown. | |||
| Offset 15178, 408 lines modified | Offset 15178, 408 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·20 | 0003b500:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b510:·b23c | 0003b510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b520:·6173 | 0003b520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b530:·7073 | 0003b530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b540:·3d | 0003b540:·2069·643d·2269·646d·3533·3539·223e·3c74···id="idm5359"><t | ||
| 0003b550:· | 0003b550:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b560:·6 | 0003b560:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b570:· | 0003b570:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b580:·6 | 0003b580:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b590:· | 0003b590:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b5a0:· | 0003b5a0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b5b0:· | 0003b5b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b5c0:· | 0003b5c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b5d0:· | 0003b5d0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003b5e0:· | 0003b5e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b5f0:· | 0003b5f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b600:·7 | 0003b600:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b610:· | 0003b610:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b620:· | 0003b620:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003b630:·2 | 0003b630:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b640:·7 | 0003b640:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003b650:· | 0003b650:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003b660:· | 0003b660:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003b670:·6 | 0003b670:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003b680:· | 0003b680:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003b690:· | 0003b690:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003b6a0:· | 0003b6a0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003b6b0:· | 0003b6b0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003b6c0:· | 0003b6c0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b6d0:· | 0003b6d0:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003b6e0:· | 0003b6e0:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003b6f0:·2 | 0003b6f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b700:· | 0003b700:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003b710:·2 | 0003b710:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003b720:· | 0003b720:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b730:· | 0003b730:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003b740:· | 0003b740:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003b750:· | 0003b750:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b760:· | 0003b760:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003b770:· | 0003b770:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003b780:· | 0003b780:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003b790:· | 0003b790:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003b7a0:· | 0003b7a0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003b7b0:· | 0003b7b0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003b7c0:· | 0003b7c0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003b7d0:· | 0003b7d0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003b7e0:· | 0003b7e0:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003b7f0:· | 0003b7f0:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003b800:· | 0003b800:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003b810:·6 | 0003b810:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003b820:· | 0003b820:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003b830:· | 0003b830:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003b840:·6 | 0003b840:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003b850:· | 0003b850:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003b860:·6 | 0003b860:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003b870:· | 0003b870:·3a20·7975·6d20·7265·696e·7374·616c·6c20··:·yum·reinstall· | ||
| 0003b880:· | 0003b880:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003b890:· | 0003b890:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003b8a0:·2 | 0003b8a0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b8b0:· | 0003b8b0:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003b8c0:· | 0003b8c0:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003b8d0:· | 0003b8d0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b8e0:· | 0003b8e0:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003b8f0:·6 | 0003b8f0:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003b900:·6 | 0003b900:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003b910:·20 | 0003b910:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003b920:· | 0003b920:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003b930:· | 0003b930:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b940:·6 | 0003b940:·6573·0a20·2020·2029·0a20·202d·2061·6e73··es.····).··-·ans | ||
| 0003b950:· | 0003b950:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b960:· | 0003b960:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b970:· | 0003b970:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003b980:· | 0003b980:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003b990:·7 | 0003b990:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003b9a0:· | 0003b9a0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b9b0:·20 | 0003b9b0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b9c0:· | 0003b9c0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b9d0:·3 | 0003b9d0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b9e0:· | 0003b9e0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b9f0:· | 0003b9f0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003ba00:· | 0003ba00:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003ba10:· | 0003ba10:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003ba20:· | 0003ba20:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003ba30:· | 0003ba30:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003ba40:· | 0003ba40:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003ba50:· | 0003ba50:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba60:· | 0003ba60:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003ba70:· | 0003ba70:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003ba80:· | 0003ba80:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003ba90:· | 0003ba90:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003baa0:·706 | 0003baa0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003bab0:· | 0003bab0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003bac0:· | 0003bac0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003bad0:· | 0003bad0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003bae0:· | 0003bae0:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003baf0:· | 0003baf0:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003bb00:· | 0003bb00:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003bb10:· | 0003bb10:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003bb20:· | 0003bb20:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003bb30:· | 0003bb30:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003bb40:· | 0003bb40:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | ||
| 0003bb50:· | 0003bb50:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003bb60:· | 0003bb60:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003bb70:· | 0003bb70:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003bb80:· | 0003bb80:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | ||
| 0003bb90:·2 | 0003bb90:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003bba0:·2 | 0003bba0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003bbb0:· | 0003bbb0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bbc0:· | 0003bbc0:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003bbd0:·2 | 0003bbd0:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003bbe0:·6 | 0003bbe0:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003bbf0:· | 0003bbf0:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003bc00:· | 0003bc00:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bc10:· | 0003bc10:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003bc20:· | 0003bc20:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003bc30:· | 0003bc30:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003bc40:· | 0003bc40:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003bc50:· | 0003bc50:·2020·2020·290a·2020·2d20·616e·7369·626c······).··-·ansibl | ||
| 0003bc60:· | 0003bc60:·655f·6469·7374·7269·6275·7469·6f6e·203d··e_distribution·= | ||
| Max diff block lines reached; 11532580/11587532 bytes (99.53%) of diff not shown. | |||
| Offset 110, 33 lines modified | Offset 110, 14 lines modified | ||
| 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 119 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 135 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 123 | ··package_facts: |
| Offset 303, 14 lines modified | Offset 284, 33 lines modified | ||
| 303 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 304 | ··-·high_complexity | 285 | ··-·high_complexity |
| 305 | ··-·high_severity | 286 | ··-·high_severity |
| 306 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 307 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 308 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 309 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 313 | run·the·following·command·to·determine·which·package·owns·it: | 307 | run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 316 | $·sudo·rpm·--restore·PACKAGENAME | 310 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 329, 46 lines modified | Offset 329, 14 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 351 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | done | ||
| 354 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 355 | #·correct·values | ||
| 356 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 357 | do | ||
| 358 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 359 | done | ||
| 360 | else | ||
| 361 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 362 | fi | ||
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 368 | -·name:·Gather·the·package·facts | 341 | -·name:·Gather·the·package·facts |
| 369 | ··package_facts: | 342 | ··package_facts: |
| Offset 476, 14 lines modified | Offset 444, 46 lines modified | ||
| 476 | ··-·PCI-DSSv4-11.5.2 | 444 | ··-·PCI-DSSv4-11.5.2 |
| 477 | ··-·high_complexity | 445 | ··-·high_complexity |
| 478 | ··-·high_severity | 446 | ··-·high_severity |
| 479 | ··-·medium_disruption | 447 | ··-·medium_disruption |
| 480 | ··-·no_reboot_needed | 448 | ··-·no_reboot_needed |
| 481 | ··-·restrict_strategy | 449 | ··-·restrict_strategy |
| 482 | ··-·rpm_verify_ownership | 450 | ··-·rpm_verify_ownership |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1118289/1126000 bytes (99.32%) of diff not shown. | |||
| Offset 15073, 221 lines modified | Offset 15073, 221 lines modified | ||
| 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ae70:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ae80:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aea0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aeb0:·6522·2069·643d·2269·646d·3536·3936·223e··e"·id="idm5696"> | |||
| 0003aec0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003aed0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aee0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003aef0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af00:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af10:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003af30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae70:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ae80:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aec0:·2269·646d·3536·3936·223e·3c70·7265·3e3c··"idm5696"><pre>< | |||
| 0003aed0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003aee0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003aef0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003af00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003af10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003af20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003af30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003af40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003af50:·2223·6964·6d35·3639·3722·2074·6162·696e··"#idm5697"·tabin | |||
| 0003af60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003af70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003af80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003afa0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003afb0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003afc0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003afd0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003afe0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aff0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b000:·6964·6d35·3639·3722·3e3c·7461·626c·6520··idm5697"><table· | |||
| 0003b010:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b020:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b030:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b040:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b050:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003 | 0003af40:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003af50:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003af60:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003af70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003af80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003af90:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003afa0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003afb0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003afc0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003afd0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003afe0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003aff0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b000:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b010:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b020:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b030:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b040:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b050:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b060:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b070:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b080:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b090:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b0a0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b0b0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0c0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0d0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0e0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0f0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b100:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b110:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b120:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b130:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b140:·740a·2020·7768·656e·3a20·2822·6b65·726e··t.··when:·("kern | |||
| 0003b150:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b160:·6163·7473·2e70·6163·6b61·6765·7320·6f72··acts.packages·or | |||
| 0003b170:·2022·6b65·726e·656c·2d75·656b·2220·696e···"kernel-uek"·in | |||
| 0003b180:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b190:·6163·6b61·6765·7329·0a20·2074·6167·733a··ackages).··tags: | |||
| 0003b1a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b1b0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b1c0:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b1d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b1e0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b1f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b200:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b210:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b220:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b230:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b240:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b250:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b260:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b270:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b280:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b290:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b2b0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2c0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b2d0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b2e0:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b2f0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b300:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b310:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b320:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b330:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b340:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b350:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b360:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b370:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b380:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b390:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b3a0:·3639·3722·3e3c·7072·653e·3c63·6f64·653e··697"><pre><code> | |||
| 0003b3b0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b3c0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b3d0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b3e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b3f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| Max diff block lines reached; 9783447/9812593 bytes (99.70%) of diff not shown. | |||
| Offset 101, 53 lines modified | Offset 101, 14 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 130 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 131 | ····yum·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Gather·the·package·facts | 113 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 114 | ··package_facts: |
| Offset 178, 14 lines modified | Offset 139, 53 lines modified | ||
| 178 | ··-·PCI-DSSv4-11.5.2 | 139 | ··-·PCI-DSSv4-11.5.2 |
| 179 | ··-·enable_strategy | 140 | ··-·enable_strategy |
| 180 | ··-·low_complexity | 141 | ··-·low_complexity |
| 181 | ··-·low_disruption | 142 | ··-·low_disruption |
| 182 | ··-·medium_severity | 143 | ··-·medium_severity |
| 183 | ··-·no_reboot_needed | 144 | ··-·no_reboot_needed |
| 184 | ··-·package_aide_installed | 145 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 156 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 157 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 158 | ····yum·install·-y·"aide" | ||
| 159 | fi | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_aide | ||
| 169 | class·install_aide·{ | ||
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 185 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 180 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 186 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 181 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 187 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 182 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 188 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 183 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 201, 27 lines modified | Offset 201, 14 lines modified | ||
| 201 | ············_\x8i_\x8s_\x8m······1446 | 201 | ············_\x8i_\x8s_\x8m······1446 |
| 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 211 | fips-mode-setup·--enable | ||
| 212 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 213 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 214 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 215 | fi | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| Max diff block lines reached; 1184733/1190499 bytes (99.52%) of diff not shown. | |||
| Offset 15166, 408 lines modified | Offset 15166, 408 lines modified | ||
| 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | ||
| 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b440:·5265·6d65·6469·6174·696f·6e20· | 0003b440:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b450:·6c20·736 | 0003b450:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b460:·3c62 | 0003b460:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b470:·7 | 0003b470:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b480:·6 | 0003b480:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b490:·35 | 0003b490:·6964·6d35·3335·3922·3e3c·7461·626c·6520··idm5359"><table· | ||
| 0003b4a0:· | 0003b4a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b4b0:· | 0003b4b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b4c0:· | 0003b4c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b4d0:· | 0003b4d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b4e0:·7 | 0003b4e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b4f0:· | 0003b4f0:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b500:· | 0003b500:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b510:·7 | 0003b510:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b520:·3 | 0003b520:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b530:· | 0003b530:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b540:· | 0003b540:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b550:·7 | 0003b550:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b560:· | 0003b560:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b570:·6 | 0003b570:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b580:· | 0003b580:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b590:· | 0003b590:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003b5a0:· | 0003b5a0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003b5b0:·6 | 0003b5b0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003b5c0:· | 0003b5c0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003b5d0:·6 | 0003b5d0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003b5e0:· | 0003b5e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b5f0:· | 0003b5f0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b600:· | 0003b600:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b610:· | 0003b610:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b620:· | 0003b620:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b630:· | 0003b630:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b640:· | 0003b640:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b650:· | 0003b650:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b660:· | 0003b660:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b670:· | 0003b670:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b680:· | 0003b680:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b690:· | 0003b690:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003b6a0:· | 0003b6a0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003b6b0:·20 | 0003b6b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003b6c0:· | 0003b6c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003b6d0:· | 0003b6d0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003b6e0:·6 | 0003b6e0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003b6f0:·2 | 0003b6f0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003b700:· | 0003b700:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003b710:· | 0003b710:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003b720:· | 0003b720:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003b730:· | 0003b730:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003b740:· | 0003b740:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003b750:· | 0003b750:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003b760:·2 | 0003b760:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b770:·6 | 0003b770:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b780:· | 0003b780:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b790:· | 0003b790:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b7a0:·6 | 0003b7a0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b7b0:· | 0003b7b0:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b7c0:· | 0003b7c0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b7d0:· | 0003b7d0:·7768·656e·3a0a·2020·2d20·6e6f·7420·2820··when:.··-·not·(· | ||
| 0003b7e0:· | 0003b7e0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | ||
| 0003b7f0:·62 | 0003b7f0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b800:·6 | 0003b800:·6573·2061·6e64·2022·7270·6d2d·6f73·7472··es·and·"rpm-ostr | ||
| 0003b810:· | 0003b810:·6565·2220·696e·2061·6e73·6962·6c65·5f66··ee"·in·ansible_f | ||
| 0003b820:· | 0003b820:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003b830:· | 0003b830:·2020·616e·6420·2262·6f6f·7463·2220·696e····and·"bootc"·in | ||
| 0003b840:· | 0003b840:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b850:·6 | 0003b850:·6163·6b61·6765·7320·616e·6420·6e6f·7420··ackages·and·not· | ||
| 0003b860:· | 0003b860:·226f·7065·6e73·6869·6674·2d6b·7562·656c··"openshift-kubel | ||
| 0003b870:·657 | 0003b870:·6574·2220·696e·2061·6e73·6962·6c65·5f66··et"·in·ansible_f | ||
| 0003b880:· | 0003b880:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003b890:· | 0003b890:·2020·290a·2020·2d20·616e·7369·626c·655f····).··-·ansible_ | ||
| 0003b8a0:· | 0003b8a0:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003b8b0:· | 0003b8b0:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003b8c0:·7 | 0003b8c0:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003b8d0:·22 | 0003b8d0:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003b8e0:·20 | 0003b8e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003b8f0:· | 0003b8f0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003b900:· | 0003b900:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003b910:· | 0003b910:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b920:·3 | 0003b920:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003b930:·2 | 0003b930:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003b940:· | 0003b940:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b950:· | 0003b950:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003b960:· | 0003b960:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003b970:· | 0003b970:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b980:· | 0003b980:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003b990:· | 0003b990:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003b9a0:· | 0003b9a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b9b0:· | 0003b9b0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003b9c0:· | 0003b9c0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003b9d0:· | 0003b9d0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003b9e0:· | 0003b9e0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003b9f0:· | 0003b9f0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003ba00:· | 0003ba00:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003ba10:·6 | 0003ba10:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003ba20:·6 | 0003ba20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003ba30:· | 0003ba30:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003ba40:· | 0003ba40:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003ba50:· | 0003ba50:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003ba60:· | 0003ba60:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003ba70:· | 0003ba70:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003ba80:· | 0003ba80:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003ba90:· | 0003ba90:·6420·287a·7970·7065·7229·270a·2020·7365··d·(zypper)'.··se | ||
| 0003baa0:· | 0003baa0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003bab0:· | 0003bab0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003bac0:· | 0003bac0:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | ||
| 0003bad0:·2 | 0003bad0:·7220·696e·202d·6620·2d79·0a20·2077·6865··r·in·-f·-y.··whe | ||
| 0003bae0:· | 0003bae0:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003baf0:· | 0003baf0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003bb00:· | 0003bb00:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bb10:· | 0003bb10:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003bb20:· | 0003bb20:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bb30:· | 0003bb30:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003bb40:· | 0003bb40:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003bb50:·7 | 0003bb50:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bb60:·6 | 0003bb60:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003bb70:· | 0003bb70:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003bb80:· | 0003bb80:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bb90:· | 0003bb90:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003bba0:· | 0003bba0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| Max diff block lines reached; 17774302/17829254 bytes (99.69%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003afa0:·6c6 | 0003afa0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003afb0:·3e3c | 0003afb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003afc0:·2270 | 0003afc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003afd0:·6 | 0003afd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003afe0:·6d35 | 0003afe0:·2269·646d·3533·3539·223e·3c74·6162·6c65··"idm5359"><table | ||
| 0003aff0:· | 0003aff0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b000:·6 | 0003b000:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b010:·6 | 0003b010:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b020:· | 0003b020:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b030:· | 0003b030:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b040:· | 0003b040:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b050:· | 0003b050:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b060:· | 0003b060:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b070:· | 0003b070:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b080:· | 0003b080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b090:· | 0003b090:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b0a0:· | 0003b0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b0b0:· | 0003b0b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b0c0:· | 0003b0c0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b0d0:· | 0003b0d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b0e0:·6 | 0003b0e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b0f0:· | 0003b0f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b100:· | 0003b100:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b110:·6 | 0003b110:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b120:· | 0003b120:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b130:·6 | 0003b130:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b140:· | 0003b140:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b150:· | 0003b150:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b160:· | 0003b160:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b170:· | 0003b170:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b180:·2 | 0003b180:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b190:· | 0003b190:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b1a0:· | 0003b1a0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b1b0:·2 | 0003b1b0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b1c0:· | 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b1d0:· | 0003b1d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b1e0:· | 0003b1e0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b1f0:· | 0003b1f0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b200:· | 0003b200:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b210:·2 | 0003b210:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b220:· | 0003b220:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b230:·6 | 0003b230:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b240:· | 0003b240:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b250:· | 0003b250:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b260:· | 0003b260:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b270:·6 | 0003b270:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b280:·7 | 0003b280:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b290:· | 0003b290:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b2a0:· | 0003b2a0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b2b0:· | 0003b2b0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b2c0:·6 | 0003b2c0:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b2d0:· | 0003b2d0:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b2e0:· | 0003b2e0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b2f0:·6 | 0003b2f0:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b300:· | 0003b300:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7975··einstall_cmd:·yu | ||
| 0003b310:·6 | 0003b310:·6d20·7265·696e·7374·616c·6c20·2d79·0a20··m·reinstall·-y.· | ||
| 0003b320:· | 0003b320:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b330:· | 0003b330:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b340:· | 0003b340:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b350:· | 0003b350:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b360:·7 | 0003b360:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b370:· | 0003b370:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b380:· | 0003b380:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b390:· | 0003b390:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b3a0:· | 0003b3a0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003b3b0:· | 0003b3b0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003b3c0:· | 0003b3c0:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003b3d0:· | 0003b3d0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b3e0:· | 0003b3e0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003b3f0:· | 0003b3f0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b400:· | 0003b400:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b410:· | 0003b410:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b420:· | 0003b420:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b430:· | 0003b430:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b440:· | 0003b440:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b450:· | 0003b450:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b460:· | 0003b460:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b470:·3 | 0003b470:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b480:· | 0003b480:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b490:· | 0003b490:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b4a0:· | 0003b4a0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b4b0:· | 0003b4b0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b4c0:· | 0003b4c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b4d0:· | 0003b4d0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b4e0:·3 | 0003b4e0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b4f0:· | 0003b4f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b500:· | 0003b500:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b510:· | 0003b510:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b520:· | 0003b520:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b530:·20 | 0003b530:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b540:·6 | 0003b540:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b550:·6 | 0003b550:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b560:· | 0003b560:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b570:·6 | 0003b570:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b580:· | 0003b580:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003b590:· | 0003b590:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003b5a0:· | 0003b5a0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003b5b0:· | 0003b5b0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003b5c0:· | 0003b5c0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003b5d0:·20 | 0003b5d0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003b5e0:· | 0003b5e0:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003b5f0:· | 0003b5f0:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b600:· | 0003b600:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b610:· | 0003b610:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003b620:· | 0003b620:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003b630:· | 0003b630:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b640:· | 0003b640:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b650:· | 0003b650:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b660:· | 0003b660:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b670:· | 0003b670:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b680:· | 0003b680:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b690:· | 0003b690:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b6a0:· | 0003b6a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b6b0:·6 | 0003b6b0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b6c0:· | 0003b6c0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b6d0:· | 0003b6d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b6e0:·7 | 0003b6e0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b6f0:· | 0003b6f0:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 10628886/10683838 bytes (99.49%) of diff not shown. | |||
| Offset 93, 33 lines modified | Offset 93, 14 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 118 | -·name:·Gather·the·package·facts | 105 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 106 | ··package_facts: |
| Offset 286, 14 lines modified | Offset 267, 33 lines modified | ||
| 286 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 287 | ··-·high_complexity | 268 | ··-·high_complexity |
| 288 | ··-·high_severity | 269 | ··-·high_severity |
| 289 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 290 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 291 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 292 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 297 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 50 lines modified | Offset 314, 14 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 357 | -·name:·Gather·the·package·facts | 326 | -·name:·Gather·the·package·facts |
| 358 | ··package_facts: | 327 | ··package_facts: |
| Offset 469, 14 lines modified | Offset 433, 50 lines modified | ||
| 469 | ··-·PCI-DSSv4-11.5.2 | 433 | ··-·PCI-DSSv4-11.5.2 |
| 470 | ··-·high_complexity | 434 | ··-·high_complexity |
| 471 | ··-·high_severity | 435 | ··-·high_severity |
| 472 | ··-·medium_disruption | 436 | ··-·medium_disruption |
| 473 | ··-·no_reboot_needed | 437 | ··-·no_reboot_needed |
| 474 | ··-·restrict_strategy | 438 | ··-·restrict_strategy |
| 475 | ··-·rpm_verify_permissions | 439 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 850502/858584 bytes (99.06%) of diff not shown. | |||
| Offset 15083, 221 lines modified | Offset 15083, 221 lines modified | ||
| 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003af10:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003af20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af50:·2069·643d·2269·646d·3536·3936·223e·3c74···id="idm5696"><t | |||
| 0003af60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003af70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003afa0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003afb0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afd0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003af10:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003af20:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003af30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003af40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003af50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af60:·646d·3536·3936·223e·3c70·7265·3e3c·636f··dm5696"><pre><co | |||
| 0003af70:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003af80:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003af90:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003afa0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003afb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003afc0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003afd0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003afe0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003aff0:·6964·6d35·3639·3722·2074·6162·696e·6465··idm5697"·tabinde | |||
| 0003b000:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b010:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b020:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b030:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b040:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b050:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b060:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b070:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b080:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b090:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0a0:·6d35·3639·3722·3e3c·7461·626c·6520·636c··m5697"><table·cl | |||
| 0003b0b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b0c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b0e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b0f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003 | 0003afe0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003 | 0003aff0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b000:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b010:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b020:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b030:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b040:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b050:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b060:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b070:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b080:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b090:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b0a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b0b0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b0c0:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003b0d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b0e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b0f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b100:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b110:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b120:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b130:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b140:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b150:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b160:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b170:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b180:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b190:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b1a0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b1b0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b1c0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b1d0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b1e0:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b1f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b200:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b210:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b220:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b230:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b240:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b250:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b260:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003b270:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b280:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b290:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b2a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b2b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b2c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b2d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b2e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b2f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b300:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b310:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b320:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b330:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b340:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b350:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b360:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b370:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b380:·2369·646d·3536·3937·2220·7461·6269·6e64··#idm5697"·tabind | |||
| 0003b390:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b3a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b3b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b3c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b3d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b3e0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b3f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b400:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b410:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b420:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b430:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b440:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b450:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b460:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b470:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b480:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b490:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| Max diff block lines reached; 29208682/29237828 bytes (99.90%) of diff not shown. | |||
| Offset 15101, 221 lines modified | Offset 15101, 221 lines modified | ||
| 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | ||
| 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b030:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b040:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b050:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b060:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b070:·7365·2220·6964·3d22·6964·6d35·3639·3622··se"·id="idm5696" | |||
| 0003b030:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b040:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b050:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b060:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b070:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b080:·3d22·6964·6d35·3639·3622·3e3c·7072·653e··="idm5696"><pre> | |||
| 0003b090:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b0a0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b0b0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b0c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b0 | 0003b080:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b090:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b0c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b0d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b0e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b0e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b100:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b110:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b120:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b130:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b140:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b150:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b160:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b170:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b180:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b190:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b1a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1c0:·2269·646d·3536·3937·223e·3c74·6162·6c65··"idm5697"><table | |||
| 0003b1d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b1e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b1f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b200:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b210:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b110:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b120:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b130:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b140:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b150:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b160:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b170:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b180:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b190:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b1a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b1b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b1c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b1d0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b1e0:·5354·4947·2d4f·4c30·382d·3030·2d30·3130··STIG-OL08-00-010 | |||
| 0003b1f0:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003b200:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b210:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b220:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b230:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b240:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b250:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b260:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b270:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b280:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b290:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b2a0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b2b0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b2c0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b2d0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b2e0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b2f0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b300:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003b310:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b320:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003b330:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003b340:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b350:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b360:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b370:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b380:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003b390:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b3a0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b3b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3d0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b3e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b3f0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b400:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b410:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b420:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b430:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b440:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b450:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b460:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b470:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b480:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b490:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4a0:·743d·2223·6964·6d35·3639·3722·2074·6162··t="#idm5697"·tab | |||
| 0003b4b0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4c0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b4d0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b4e0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b4f0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b500:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b510:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b520:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b530:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b540:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b550:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b560:·3536·3937·223e·3c70·7265·3e3c·636f·6465··5697"><pre><code | |||
| 0003b570:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b580:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b590:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b5a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b5b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b5c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 29083741/29112887 bytes (99.90%) of diff not shown. | |||
| Offset 15037, 218 lines modified | Offset 15037, 218 lines modified | ||
| 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | ||
| 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac30:·6d65·6469·6174·696f·6e20·4 | 0003ac30:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003ac40:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003ac50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ac60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ac70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ac80:·6d36·3237·3922·3e3c·7461·626c·6520·636c··m6279"><table·cl | |||
| 0003ac90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aca0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003acb0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003acc0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003acd0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ace0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003acf0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ac40:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003ac50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac80:·7365·2220·6964·3d22·6964·6d36·3237·3922··se"·id="idm6279" | |||
| 0003ac90:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003aca0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acb0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acc0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003acd0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ace0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003acf0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ad00:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ad10:·7461·7267·6574·3d22·2369·646d·3632·3830··target="#idm6280 | |||
| 0003ad20:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad30:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad40:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad50:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad60:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad70:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad80:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ad90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ada0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003adb0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003adc0:·6522·2069·643d·2269·646d·3632·3830·223e··e"·id="idm6280"> | |||
| 0003add0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ade0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003adf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ae00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ae10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a | 0003ad00:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003a | 0003ad10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ae40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a | 0003ad20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003ad30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ad40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a | 0003ad50:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003ae80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aea0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003aeb0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003aec0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003aed0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003aee0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003aef0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003af00:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003af10:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003a | 0003ad60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003ad70:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ad80:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003ad90:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003ada0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003adb0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003adc0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003add0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003ade0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003adf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003ae00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003ae10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003ae20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003ae30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003ae40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ae50:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ae60:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003ae70:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003ae80:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003ae90:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003aea0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003aeb0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003aec0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003aed0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003aee0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003aef0:·656e·3a20·2822·6b65·726e·656c·2220·696e··en:·("kernel"·in | |||
| 0003af00:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003af10:·6163·6b61·6765·7320·6f72·2022·6b65·726e··ackages·or·"kern | |||
| 0003af20:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003af30:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003af40:·7329·0a20·2074·6167·733a·0a20·202d·2043··s).··tags:.··-·C | |||
| 0003af50:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003af60:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003af70:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003af80:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003af90:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003afa0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003afb0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003afc0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003afd0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003afe0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003aff0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b000:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b010:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003 | 0003b020:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003 | 0003b030:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003 | 0003b040:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003 | 0003b050:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003 | 0003b060:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003 | 0003b070:·6964·6d36·3238·3022·2074·6162·696e·6465··idm6280"·tabinde | ||
| 0003 | 0003b080:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003 | 0003b090:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003 | 0003b0a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003 | 0003b0b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003 | 0003b0c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0d0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b0e0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b0f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b100:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 21564648/21593380 bytes (99.87%) of diff not shown. | |||
| Offset 15042, 218 lines modified | Offset 15042, 218 lines modified | ||
| 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | ||
| 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ac80:·3e52·656d·6564·6961·7469·6f6e·204 | 0003ac80:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003ac90:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aca0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003acb0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003acc0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003acd0:·2269·646d·3632·3739·223e·3c74·6162·6c65··"idm6279"><table | |||
| 0003ace0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003acf0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ad00:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ad10:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ad20:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ad30:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ad40:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ad50:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ac90:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003aca0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003acb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003acc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003acd0:·6c61·7073·6522·2069·643d·2269·646d·3632··lapse"·id="idm62 | |||
| 0003ace0:·3739·223e·3c70·7265·3e3c·636f·6465·3e0a··79"><pre><code>. | |||
| 0003acf0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ad00:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ad10:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ad20:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad30:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad40:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ad50:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ad60:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad70:·3238·3022·2074·6162·696e·6465·783d·2230··280"·tabindex="0 | |||
| 0003ad80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ad90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ada0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003adb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003adc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003add0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ade0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003adf0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae10:·6170·7365·2220·6964·3d22·6964·6d36·3238··apse"·id="idm628 | |||
| 0003ae20:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003ae30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003ad60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003ae90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a | 0003ad70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003ad80:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a | 0003ad90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003a | 0003ada0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003aed0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aee0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aef0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003af00:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003af10:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003af20:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003a | 0003adb0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003adc0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003add0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ade0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003adf0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003ae00:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ae10:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003ae20:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003ae30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ae40:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ae50:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ae60:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ae70:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ae80:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003ae90:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003aea0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003aeb0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003aec0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003aed0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003aee0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003aef0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003af00:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003af | 0003af10:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003af50:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003af60:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003af | 0003af20:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | ||
| 0003af30:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003af40:·2077·6865·6e3a·2028·226b·6572·6e65·6c22···when:·("kernel" | |||
| 0003af50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003af60:·732e·7061·636b·6167·6573·206f·7220·226b··s.packages·or·"k | |||
| 0003af70:·6572·6e65·6c2d·7565·6b22·2069·6e20·616e··ernel-uek"·in·an | |||
| 0003af80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003af90:·6167·6573·290a·2020·7461·6773·3a0a·2020··ages).··tags:.·· | |||
| 0003afa0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003afb0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003afc0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afd0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003afe0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003aff0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b000:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b010:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b020:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b030:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b040:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b050:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b060:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003 | 0003b070:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003 | 0003b080:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003 | 0003b090:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003 | 0003b0a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003 | 0003b0b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003 | 0003b0c0:·3d22·2369·646d·3632·3830·2220·7461·6269··="#idm6280"·tabi | ||
| 0003 | 0003b0d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003 | 0003b0e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0 | 0003b0f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b | 0003b100:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b02 | 0003b110:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b | 0003b120:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b130:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b140:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b150:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b160:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b170:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| Max diff block lines reached; 21869444/21898176 bytes (99.87%) of diff not shown. | |||
| Offset 15033, 218 lines modified | Offset 15033, 218 lines modified | ||
| 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | ||
| 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003abf0:·6961·7469·6f6e·204 | 0003abf0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003ac00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ac10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ac20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ac30:·6c61·7073·6522·2069·643d·2269·646d·3632··lapse"·id="idm62 | |||
| 0003ac40:·3739·223e·3c74·6162·6c65·2063·6c61·7373··79"><table·class | |||
| 0003ac50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ac60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ac70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ac80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ac90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aca0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003acb0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ac00:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003ac10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ac20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ac30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ac40:·2069·643d·2269·646d·3632·3739·223e·3c70···id="idm6279"><p | |||
| 0003ac50:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003ac60:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ac70:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ac80:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ac90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aca0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003acb0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003acc0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003acd0:·6765·743d·2223·6964·6d36·3238·3022·2074··get="#idm6280"·t | |||
| 0003ace0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003acf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ad00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ad10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ad20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ad30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ad40:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ad50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ad60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ad70:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ad80:·6964·3d22·6964·6d36·3238·3022·3e3c·7461··id="idm6280"><ta | |||
| 0003ad90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ada0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003adb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003adc0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003add0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003acc0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003a | 0003acd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ae00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ae10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae2 | 0003ace0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003acf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ad00:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a | 0003ad10:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae50:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ae60:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ae70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ae80:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003ae90:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003aea0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003aeb0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003aec0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003aed0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003a | 0003ad20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003ad30:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003ad40:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003ad50:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003ad60:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003ad70:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003ad80:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003ad90:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003ada0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003adb0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003adc0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003add0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003ade0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003adf0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ae00:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ae10:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ae20:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ae30:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ae40:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003ae50:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003ae60:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003ae70:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003ae80:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003ae90:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003aea0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003aeb0:·2028·226b·6572·6e65·6c22·2069·6e20·616e···("kernel"·in·an | |||
| 0003aec0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003aed0:·6167·6573·206f·7220·226b·6572·6e65·6c2d··ages·or·"kernel- | |||
| 0003aee0:·7565·6b22·2069·6e20·616e·7369·626c·655f··uek"·in·ansible_ | |||
| 0003aef0:·6661·6374·732e·7061·636b·6167·6573·290a··facts.packages). | |||
| 0003af00:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003af10:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003af20:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003af30:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003af40:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003af50:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003af60:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af70:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af80:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003af90:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003afa0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003afb0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003afc0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003afd0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003a | 0003afe0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003af | 0003aff0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003 | 0003b000:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003 | 0003b010:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003 | 0003b020:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003 | 0003b030:·3632·3830·2220·7461·6269·6e64·6578·3d22··6280"·tabindex=" | ||
| 0003 | 0003b040:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003 | 0003b050:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003 | 0003b060:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003 | 0003b070:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003 | 0003b080:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b090:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b0a0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b0b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| Max diff block lines reached; 9776037/9804769 bytes (99.71%) of diff not shown. | |||
| Offset 112, 53 lines modified | Offset 112, 14 lines modified | ||
| 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_aide | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 141 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 142 | ····yum·install·-y·"aide" | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·--add=aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 124 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 125 | ··package_facts: |
| Offset 187, 14 lines modified | Offset 148, 53 lines modified | ||
| 187 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 188 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 189 | ··-·low_complexity | 150 | ··-·low_complexity |
| 190 | ··-·low_disruption | 151 | ··-·low_disruption |
| 191 | ··-·medium_severity | 152 | ··-·medium_severity |
| 192 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 193 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 167 | ····yum·install·-y·"aide" | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 193 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 194 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 28 lines modified | Offset 218, 14 lines modified | ||
| 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 228 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 229 | ····yum·install·-y·"aide" | ||
| 230 | fi | ||
| 231 | /usr/sbin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 233 | else | ||
| Max diff block lines reached; 1057879/1062932 bytes (99.52%) of diff not shown. | |||
| Offset 14725, 227 lines modified | Offset 14725, 227 lines modified | ||
| 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | ||
| 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 000398b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 000398b0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 000398c0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 000398d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000398e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000398f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039900:·2269·646d·3935·3639·223e·3c70·7265·3e3c··"idm9569"><pre>< | |||
| 00039910:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 00039920:·5d5d·0a6e·616d·6520·3d20·2264·6e66·2d61··]].name·=·"dnf-a | |||
| 00039930:·7574·6f6d·6174·6963·220a·7665·7273·696f··utomatic".versio | |||
| 00039940:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00039950:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039960:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039970:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039980:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039990:·612d·7461·7267·6574·3d22·2369·646d·3935··a-target="#idm95 | |||
| 000399a0:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 000399b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000399c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000399d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000399e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000399f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039a00:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 00039a10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039a20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039a30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039a40:·7073·6522·2069·643d·2269·646d·3935·3730··pse"·id="idm9570 | |||
| 00039a50:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039a60:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039a70:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039a80:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039a90:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039aa0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039ab0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039ac0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039ad0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039ae0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039af0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039b00:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039b10:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039b20:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039b30:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039b40:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 00039b50:·6520·696e·7374·616c·6c5f·646e·662d·6175··e·install_dnf-au | |||
| 00039b60:·746f·6d61·7469·630a·0a63·6c61·7373·2069··tomatic..class·i | |||
| 00039b70:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | |||
| 00039b80:·6174·6963·207b·0a20·2070·6163·6b61·6765··atic·{.··package | |||
| 00039b90:·207b·2027·646e·662d·6175·746f·6d61·7469···{·'dnf-automati | |||
| 00039ba0:·6327·3a0a·2020·2020·656e·7375·7265·203d··c':.····ensure·= | |||
| 00039bb0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 00039bc0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 00039bd0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039be0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039bf0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039c00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039c10:·612d·7461·7267·6574·3d22·2369·646d·3935··a-target="#idm95 | |||
| 00039c20:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 00039c30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039c40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039c50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039c60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00039c70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039c80:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00039 | 000398c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00039 | 000398d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039 | 000398e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039 | 000398f0:·6522·2069·643d·2269·646d·3935·3639·223e··e"·id="idm9569"> | ||
| 00039 | 00039900:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00039 | 00039910:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 00039 | 00039920:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00039 | 00039930:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00039 | 00039940:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 00039 | 00039950:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00039 | 00039960:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00039 | 00039970:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00039 | 00039980:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00039 | 00039990:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00039 | 000399a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00039 | 000399b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 00039 | 000399c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00039 | 000399d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 00039 | 000399e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 00039 | 000399f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 00039dd0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00039de0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00039df0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00039e00:·2021·2028·207b·2072·706d·202d·2d71·7569···!·(·{·rpm·--qui | |||
| 00039e10:·6574·202d·7120·6b65·726e·656c·203b·7d20··et·-q·kernel·;}· | |||
| 00039e20:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | |||
| 00039e30:·202d·2d71·7569·6574·202d·7120·7270·6d2d···--quiet·-q·rpm- | |||
| 00039e40:·6f73·7472·6565·203b·7d20·2661·6d70·3b26··ostree·;}·&& | |||
| 00039e50:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | |||
| 00039e60:·6574·202d·7120·626f·6f74·6320·3b7d·2026··et·-q·bootc·;}·& | |||
| 00039e70:·616d·703b·2661·6d70·3b20·7b20·2120·7270··amp;&·{·!·rp | |||
| 00039 | 00039a00:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 00039a10:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00039a20:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00039a30:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00039a40:·6773·3a0a·2020·2d20·656e·6162·6c65·5f73··gs:.··-·enable_s | |||
| 00039a50:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00039a60:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00039a70:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00039a80:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00039a90:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00039aa0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00039ab0:·6765·5f64·6e66·2d61·7574·6f6d·6174·6963··ge_dnf-automatic | |||
| 00039ac0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 00039ad0:·6d65·3a20·456e·7375·7265·2064·6e66·2d61··me:·Ensure·dnf-a | |||
| 00039ae0:·7574·6f6d·6174·6963·2069·7320·696e·7374··utomatic·is·inst | |||
| 00039af0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00039b00:·0a20·2020·206e·616d·653a·2064·6e66·2d61··.····name:·dnf-a | |||
| 00039b10:·7574·6f6d·6174·6963·0a20·2020·2073·7461··utomatic.····sta | |||
| 00039b20:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00039b30:·656e·3a20·6e6f·7420·2820·226b·6572·6e65··en:·not·(·"kerne | |||
| 00039b40:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 00039b50:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | |||
| 00039b60:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | |||
| 00039b70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00039b80:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | |||
| 00039b90:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | |||
| Max diff block lines reached; 3603693/3633667 bytes (99.18%) of diff not shown. | |||
| Offset 81, 54 lines modified | Offset 81, 14 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | [[packages]] | ||
| 90 | name·=·"dnf-automatic" | ||
| 91 | version·=·"*" | ||
| 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | include·install_dnf-automatic | ||
| 98 | class·install_dnf-automatic·{ | ||
| 99 | ··package·{·'dnf-automatic': | ||
| 100 | ····ensure·=>·'installed', | ||
| 101 | ··} | ||
| 102 | } | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 110 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 111 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 112 | ····yum·install·-y·"dnf-automatic" | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=dnf-automatic | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 93 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 94 | ··package_facts: |
| Offset 152, 14 lines modified | Offset 112, 54 lines modified | ||
| 152 | ··tags: | 112 | ··tags: |
| 153 | ··-·enable_strategy | 113 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 114 | ··-·low_complexity |
| 155 | ··-·low_disruption | 115 | ··-·low_disruption |
| 156 | ··-·medium_severity | 116 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 117 | ··-·no_reboot_needed |
| 158 | ··-·package_dnf-automatic_installed | 118 | ··-·package_dnf-automatic_installed |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"dnf-automatic" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 130 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 132 | ····yum·install·-y·"dnf-automatic" | ||
| 133 | fi | ||
| 134 | else | ||
| 135 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 136 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | include·install_dnf-automatic | ||
| 143 | class·install_dnf-automatic·{ | ||
| 144 | ··package·{·'dnf-automatic': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | } | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=dnf-automatic | ||
| 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 155 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 161 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 156 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 162 | automatic.conf. | 157 | automatic.conf. |
| 163 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 158 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 164 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 159 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 165 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 160 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 304, 42 lines modified | Offset 304, 14 lines modified | ||
| 304 | ···························(a),·CM-11(b) | 304 | ···························(a),·CM-11(b) |
| 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·rpm·--quiet·-q·yum;·then | ||
| 314 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 315 | #·adding·any·search·characters·to·the·config·file. | ||
| 316 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 317 | #·shellcheck·disable=SC2059 | ||
| 318 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| Max diff block lines reached; 230743/236876 bytes (97.41%) of diff not shown. | |||
| Offset 15109, 176 lines modified | Offset 15109, 176 lines modified | ||
| 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b0c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b100:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b110:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b120:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b130:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b140:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b150:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b | 0003b0c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b0d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b100:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b110:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b120:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b130:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b140:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b150:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b160:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b170:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b180:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b190:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b1f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b200:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b210:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003b | 0003b220:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b190:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1a0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1b0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1c0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1d0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1e0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b1f0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b200:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b210:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b220:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b230:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b240:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b250:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b260:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b270:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b280:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b290:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2a0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2b0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2c0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2d0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2e0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b2f0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b300:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b310:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b320:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b330:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b340:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b350:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b360:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b370:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b380:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b390:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3a0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3b0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3c0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3d0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b3f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b400:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b410:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b420:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b430:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b440:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b450:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b460:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b470:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b480:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b490:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4e0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b4f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b500:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b510:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b520:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b530:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b540:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b550:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b560:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b570:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b580:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b590:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5c0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5e0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b5f0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b600:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b230:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | ||
| 0003b | 0003b240:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | ||
| 0003b | 0003b250:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | ||
| 0003b260:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b270:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b280:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b290:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2a0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2b0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2c0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2d0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2e0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b2f0:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| 0003b300:·0a2d·206e·616d·653a·2043·6f6e·6669·6775··.-·name:·Configu | |||
| Max diff block lines reached; 11822601/11845537 bytes (99.81%) of diff not shown. | |||
| Offset 128, 33 lines modified | Offset 128, 14 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 155 | ··set_fact: | 141 | ··set_fact: |
| Offset 199, 14 lines modified | Offset 180, 33 lines modified | ||
| 199 | ··-·PCI-DSSv4-2.2.7 | 180 | ··-·PCI-DSSv4-2.2.7 |
| 200 | ··-·configure_crypto_policy | 181 | ··-·configure_crypto_policy |
| 201 | ··-·high_severity | 182 | ··-·high_severity |
| 202 | ··-·low_complexity | 183 | ··-·low_complexity |
| 203 | ··-·low_disruption | 184 | ··-·low_disruption |
| 204 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 205 | ··-·restrict_strategy | 186 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 212 | ············and·makes·system·configuration·more·fragmented. | 207 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 19 lines modified | Offset 217, 14 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 233 | ··lineinfile: | 230 | ··lineinfile: |
| Offset 247, 14 lines modified | Offset 242, 19 lines modified | ||
| 247 | ··-·PCI-DSSv4-2.2.7 | 242 | ··-·PCI-DSSv4-2.2.7 |
| 248 | ··-·configure_ssh_crypto_policy | 243 | ··-·configure_ssh_crypto_policy |
| 249 | ··-·disable_strategy | 244 | ··-·disable_strategy |
| 250 | ··-·low_complexity | 245 | ··-·low_complexity |
| 251 | ··-·medium_disruption | 246 | ··-·medium_disruption |
| 252 | ··-·medium_severity | 247 | ··-·medium_severity |
| 253 | ··-·reboot_required | 248 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 254 | Group ·Disk·Partitioning· Group·contains·1·rule | 252 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be | 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be |
| 256 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 254 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 257 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 255 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 258 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 256 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 259 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 257 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 260 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 258 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 339, 75 lines modified | Offset 339, 14 lines modified | ||
| 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 340 | Severity: ··medium | 340 | Severity: ··medium |
| 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 349 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 350 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 351 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 352 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 353 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 354 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 355 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 1073638/1081421 bytes (99.28%) of diff not shown. | |||
| Offset 15069, 176 lines modified | Offset 15069, 176 lines modified | ||
| 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | ||
| 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003ae40:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ae50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae80:·646d·3730·3436·223e·3c70·7265·3e3c·636f··dm7046"><pre><co | |||
| 0003ae90:·6465·3e0a·7661·725f·7379·7374·656d·5f63··de>.var_system_c | |||
| 0003aea0:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | |||
| 0003aeb0:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003aec0:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003aed0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003ae | 0003ae40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003ae50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae80:·3d22·6964·6d37·3034·3622·3e3c·7461·626c··="idm7046"><tabl | |||
| 0003ae90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aea0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aeb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aec0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aed0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aee0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aef0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af60:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003af70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af80:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003a | 0003af90:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 0003af | 0003afa0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003af10:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003af20:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003af30:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 0003af40:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003af50:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003af60:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 0003af70:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 0003af80:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 0003af90:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 0003afa0:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 0003afb0:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 0003afc0:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 0003afd0:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 0003afe0:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 0003aff0:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 0003b000:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 0003b010:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 0003b020:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 0003b030:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 0003b040:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 0003b050:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003b060:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 0003b070:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 0003b080:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 0003b090:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 0003b0a0:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 0003b0b0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b0c0:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 0003b0d0:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 0003b0e0:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 0003b0f0:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 0003b100:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 0003b110:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 0003b120:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 0003b130:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 0003b140:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 0003b150:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 0003b160:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b170:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b180:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b190:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1b0:·6574·3d22·2369·646d·3730·3438·2220·7461··et="#idm7048"·ta | |||
| 0003b1c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b1e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b1f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b200:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b210:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b220:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b230:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b240:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b250:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b260:·6964·3d22·6964·6d37·3034·3822·3e3c·7461··id="idm7048"><ta | |||
| 0003b270:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b280:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b290:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b2a0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b2b0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b2f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b300:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b310:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b320:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b330:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b340:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003b350:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b360:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | |||
| 0003b370:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | |||
| 0003b380:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003 | 0003afb0:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | ||
| 0003 | 0003afc0:·6172·6961·626c·650a·2020·7365·745f·6661··ariable.··set_fa | ||
| 0003 | 0003afd0:·6374·3a0a·2020·2020·7661·725f·7379·7374··ct:.····var_syst | ||
| 0003afe0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003aff0:·3a20·2121·7374·7220·3c61·6262·7220·7469··:·!!str·<abbr·ti | |||
| 0003b000:·746c·653d·2266·726f·6d20·5072·6f66·696c··tle="from·Profil | |||
| 0003b010:·652f·7265·6669·6e65·2d76·616c·7565·3a20··e/refine-value:· | |||
| 0003b020:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 0003b030:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 0003b040:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 0003b050:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 0003b060:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | |||
| 0003b070:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | |||
| 0003b080:·0a0a·2d20·6e61·6d65·3a20·436f·6e66·6967··..-·name:·Config | |||
| Max diff block lines reached; 7787030/7809966 bytes (99.71%) of diff not shown. | |||
| Offset 125, 33 lines modified | Offset 125, 14 lines modified | ||
| 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 128 | ·····················FCS_TLSC_EXT.1 | 128 | ·····················FCS_TLSC_EXT.1 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | var_system_crypto_policy='DEFAULT' | ||
| 134 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 135 | rc=$? | ||
| 136 | if·test·"$rc"·=·127;·then | ||
| 137 | » echo·"$stderr_of_call"·>&2 | ||
| 138 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 139 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 140 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 141 | » false··#·end·with·an·error·code | ||
| 142 | elif·test·"$rc"·!=·0;·then | ||
| 143 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 137 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 152 | ··set_fact: | 138 | ··set_fact: |
| Offset 196, 14 lines modified | Offset 177, 33 lines modified | ||
| 196 | ··-·PCI-DSSv4-2.2.7 | 177 | ··-·PCI-DSSv4-2.2.7 |
| 197 | ··-·configure_crypto_policy | 178 | ··-·configure_crypto_policy |
| 198 | ··-·high_severity | 179 | ··-·high_severity |
| 199 | ··-·low_complexity | 180 | ··-·low_complexity |
| 200 | ··-·low_disruption | 181 | ··-·low_disruption |
| 201 | ··-·no_reboot_needed | 182 | ··-·no_reboot_needed |
| 202 | ··-·restrict_strategy | 183 | ··-·restrict_strategy |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | var_system_crypto_policy='DEFAULT' | ||
| 186 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 187 | rc=$? | ||
| 188 | if·test·"$rc"·=·127;·then | ||
| 189 | » echo·"$stderr_of_call"·>&2 | ||
| 190 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 191 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 192 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 193 | » false··#·end·with·an·error·code | ||
| 194 | elif·test·"$rc"·!=·0;·then | ||
| 195 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | fi | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 199 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 205 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 200 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 206 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 201 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 207 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 202 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 208 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 203 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 209 | ············expectations,·and·makes·system·configuration·more·fragmented. | 204 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 214, 19 lines modified | Offset 214, 14 lines modified | ||
| 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 222 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 223 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 226 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 230 | ··lineinfile: | 227 | ··lineinfile: |
| Offset 244, 14 lines modified | Offset 239, 19 lines modified | ||
| 244 | ··-·PCI-DSSv4-2.2.7 | 239 | ··-·PCI-DSSv4-2.2.7 |
| 245 | ··-·configure_ssh_crypto_policy | 240 | ··-·configure_ssh_crypto_policy |
| 246 | ··-·disable_strategy | 241 | ··-·disable_strategy |
| 247 | ··-·low_complexity | 242 | ··-·low_complexity |
| 248 | ··-·medium_disruption | 243 | ··-·medium_disruption |
| 249 | ··-·medium_severity | 244 | ··-·medium_severity |
| 250 | ··-·reboot_required | 245 | ··-·reboot_required |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 248 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 251 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule | 249 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule |
| 252 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow | 250 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow |
| 253 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME | 251 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME |
| 254 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as | 252 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as |
| 255 | display·server·management. | 253 | display·server·management. |
| 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical | 254 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical |
| Offset 274, 23 lines modified | Offset 274, 14 lines modified | ||
| 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db | 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·};·then | ||
| 284 | dconf·update | ||
| 285 | else | ||
| 286 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 287 | fi | ||
| 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 803952/809682 bytes (99.29%) of diff not shown. | |||
| Offset 15110, 176 lines modified | Offset 15110, 176 lines modified | ||
| 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b0d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b100:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b110:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b120:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b130:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b140:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b150:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b160:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b | 0003b0d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b0e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b100:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b110:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b120:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b130:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b140:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b150:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b160:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b170:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b180:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b190:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b200:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b210:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b220:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003b | 0003b230:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b1a0:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1b0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1c0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1d0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1e0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1f0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b200:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b210:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b220:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b230:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b240:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b250:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b260:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b270:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b280:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b290:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b2a0:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2b0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2c0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2d0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2e0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2f0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b300:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b310:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b320:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b330:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b340:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b350:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b360:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b370:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b380:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b390:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b3a0:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3b0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3c0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3d0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3e0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b440:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b450:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b460:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b470:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b480:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b490:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b4a0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4b0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4f0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b530:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b540:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b550:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b570:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b580:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b590:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b5a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5d0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b600:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b610:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b240:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | ||
| 0003b | 0003b250:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | ||
| 0003b | 0003b260:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | ||
| 0003b270:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b280:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b290:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b2a0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2b0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2c0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2d0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2e0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2f0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b300:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| 0003b310:·0a2d·206e·616d·653a·2043·6f6e·6669·6775··.-·name:·Configu | |||
| Max diff block lines reached; 8978881/9001817 bytes (99.75%) of diff not shown. | |||
| Offset 128, 33 lines modified | Offset 128, 14 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 155 | ··set_fact: | 141 | ··set_fact: |
| Offset 199, 14 lines modified | Offset 180, 33 lines modified | ||
| 199 | ··-·PCI-DSSv4-2.2.7 | 180 | ··-·PCI-DSSv4-2.2.7 |
| 200 | ··-·configure_crypto_policy | 181 | ··-·configure_crypto_policy |
| 201 | ··-·high_severity | 182 | ··-·high_severity |
| 202 | ··-·low_complexity | 183 | ··-·low_complexity |
| 203 | ··-·low_disruption | 184 | ··-·low_disruption |
| 204 | ··-·no_reboot_needed | 185 | ··-·no_reboot_needed |
| 205 | ··-·restrict_strategy | 186 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 212 | ············and·makes·system·configuration·more·fragmented. | 207 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 19 lines modified | Offset 217, 14 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 233 | ··lineinfile: | 230 | ··lineinfile: |
| Offset 247, 14 lines modified | Offset 242, 19 lines modified | ||
| 247 | ··-·PCI-DSSv4-2.2.7 | 242 | ··-·PCI-DSSv4-2.2.7 |
| 248 | ··-·configure_ssh_crypto_policy | 243 | ··-·configure_ssh_crypto_policy |
| 249 | ··-·disable_strategy | 244 | ··-·disable_strategy |
| 250 | ··-·low_complexity | 245 | ··-·low_complexity |
| 251 | ··-·medium_disruption | 246 | ··-·medium_disruption |
| 252 | ··-·medium_severity | 247 | ··-·medium_severity |
| 253 | ··-·reboot_required | 248 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 254 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules | 252 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules |
| 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to | 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to |
| 256 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display | 254 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display |
| 257 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 255 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 258 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. | 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. |
| Offset 282, 75 lines modified | Offset 282, 14 lines modified | ||
| 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 283 | Severity: ··medium | 283 | Severity: ··medium |
| 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 292 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 293 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 294 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 295 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 296 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 297 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 298 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 950178/957828 bytes (99.20%) of diff not shown. | |||
| Offset 15040, 259 lines modified | Offset 15040, 259 lines modified | ||
| 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | ||
| 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ac60:·6469·6174·696f·6e20· | 0003ac60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003ac70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ac80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ac90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003aca0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003acb0:·3737·3122·3e3c·7461·626c·6520·636c·6173··771"><table·clas | |||
| 0003acc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003acd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ace0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003acf0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ac70:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ac80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ac90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aca0:·7073·6522·2069·643d·2269·646d·3637·3731··pse"·id="idm6771 | |||
| 0003acb0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003acc0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003acd0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003ace0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003acf0:·6d73·0a69·6620·2820·2120·2820·5b20·2224··ms.if·(·!·(·[·"$ | |||
| 0003ad00:·7b63·6f6e·7461·696e·6572·3a2d·7d22·203d··{container:-}"·= | |||
| 0003ad10:·3d20·2262·7772·6170·2d6f·7362·7569·6c64··=·"bwrap-osbuild | |||
| 0003ad20:·2220·5d20·2920·2661·6d70·3b26·616d·703b··"·]·)·&& | |||
| 0003ad30:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003ad40:·6b65·726e·656c·207c·7c20·7270·6d20·2d2d··kernel·||·rpm·-- | |||
| 0003ad50:·7175·6965·7420·2d71·206b·6572·6e65·6c2d··quiet·-q·kernel- | |||
| 0003ad60:·7565·6b20·2920·2661·6d70·3b26·616d·703b··uek·)·&& | |||
| 0003ad70:·207b·2021·2028·207b·2072·706d·202d·2d71···{·!·(·{·rpm·--q | |||
| 0003ad80:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | |||
| 0003ad90:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | |||
| 0003ada0:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | |||
| 0003adb0:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | |||
| 0003adc0:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | |||
| 0003add0:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | |||
| 0003ade0:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | |||
| 0003adf0:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | |||
| 0003ae00:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | |||
| 0003ae10:·203b·7d20·293b·207d·3b20·7468·656e·0a0a···;}·);·};·then.. | |||
| 0003ae20:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | |||
| 0003ae30:·2d2d·656e·6162·6c65·0a46·4950·535f·434f··--enable.FIPS_CO | |||
| 0003ae40:·4e46·3d22·2f65·7463·2f64·7261·6375·742e··NF="/etc/dracut. | |||
| 0003ae50:·636f·6e66·2e64·2f34·302d·6669·7073·2e63··conf.d/40-fips.c | |||
| 0003ae60:·6f6e·6622·0a69·6620·2120·6772·6570·2022··onf".if·!·grep·" | |||
| 0003ae70:·5e61·6464·5f64·7261·6375·746d·6f64·756c··^add_dracutmodul | |||
| 0003ae80:·6573·2b3d·5c22·2066·6970·7320·5c22·2220··es+=\"·fips·\""· | |||
| 0003ae90:·2446·4950·535f·434f·4e46·3b20·7468·656e··$FIPS_CONF;·then | |||
| 0003aea0:·0a20·2020·2065·6368·6f20·2261·6464·5f64··.····echo·"add_d | |||
| 0003aeb0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003aec0:·2066·6970·7320·5c22·2220·2667·743b·2667···fips·\""·>&g | |||
| 0003aed0:·743b·2024·4649·5053·5f43·4f4e·460a·6669··t;·$FIPS_CONF.fi | |||
| 0003aee0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003aef0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003af00:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003af10:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003af20:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003af30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003af50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003af70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003af80:·3d22·2369·646d·3637·3732·2220·7461·6269··="#idm6772"·tabi | |||
| 0003af90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003afa0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003afb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003afc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003afd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003afe0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003aff0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b030:·3d22·6964·6d36·3737·3222·3e3c·7461·626c··="idm6772"><tabl | |||
| 0003b040:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b050:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b060:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b070:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b080:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b090:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003 | 0003ad10:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003ad20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ad40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ad50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ad60:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003 | 0003ad70:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003 | 0003ad80:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003ad90:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ada0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adb0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003adc0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003add0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ade0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003adf0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b110:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003b120:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b130:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b140:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b150:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b160:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b170:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b180:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003b190:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b1a0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 0003b1b0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | |||
| 0003b1c0:·3533·2d53·432d·3132·0a20·202d·204e·4953··53-SC-12.··-·NIS | |||
| 0003b1d0:·542d·3830·302d·3533·2d53·432d·3132·2832··T-800-53-SC-12(2 | |||
| 0003b1e0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b1f0:·332d·5343·2d31·3228·3329·0a20·202d·204e··3-SC-12(3).··-·N | |||
| 0003b200:·4953·542d·3830·302d·3533·2d53·432d·3133··IST-800-53-SC-13 | |||
| 0003b210:·0a20·202d·2065·6e61·626c·655f·6472·6163··.··-·enable_drac | |||
| 0003b220:·7574·5f66·6970·735f·6d6f·6475·6c65·0a20··ut_fips_module.· | |||
| 0003b230:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | |||
| 0003b240:·0a20·202d·206d·6564·6975·6d5f·636f·6d70··.··-·medium_comp | |||
| 0003b250:·6c65·7869·7479·0a20·202d·206d·6564·6975··lexity.··-·mediu | |||
| 0003b260:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | |||
| 0003b270:·2072·6562·6f6f·745f·7265·7175·6972·6564···reboot_required | |||
| Max diff block lines reached; 4987036/5021426 bytes (99.32%) of diff not shown. | |||
| Offset 97, 27 lines modified | Offset 97, 14 lines modified | ||
| 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 99 | ············_\x8i_\x8s_\x8m······1446 | 99 | ············_\x8i_\x8s_\x8m······1446 |
| 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 107 | fips-mode-setup·--enable | ||
| 108 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 109 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 110 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 109 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 110 | ··package_facts: |
| Offset 203, 14 lines modified | Offset 190, 27 lines modified | ||
| 203 | ··-·NIST-800-53-SC-13 | 190 | ··-·NIST-800-53-SC-13 |
| 204 | ··-·enable_dracut_fips_module | 191 | ··-·enable_dracut_fips_module |
| 205 | ··-·high_severity | 192 | ··-·high_severity |
| 206 | ··-·medium_complexity | 193 | ··-·medium_complexity |
| 207 | ··-·medium_disruption | 194 | ··-·medium_disruption |
| 208 | ··-·reboot_required | 195 | ··-·reboot_required |
| 209 | ··-·restrict_strategy | 196 | ··-·restrict_strategy |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 200 | fips-mode-setup·--enable | ||
| 201 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 202 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 203 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 204 | fi | ||
| 205 | else | ||
| 206 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 207 | fi | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | To·enable·FIPS·mode,·run·the·following·command: | 209 | To·enable·FIPS·mode,·run·the·following·command: |
| 212 | fips-mode-setup·--enable | 210 | fips-mode-setup·--enable |
| 213 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 211 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 214 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 212 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 215 | ····*·Creating·/etc/system-fips | 213 | ····*·Creating·/etc/system-fips |
| Offset 259, 63 lines modified | Offset 259, 63 lines modified | ||
| 259 | $·sudo·yum·install·crypto-policies | 259 | $·sudo·yum·install·crypto-policies |
| 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 261 | Severity: ··medium | 261 | Severity: ··medium |
| 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 267 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 268 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 269 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 270 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 271 | -·name:·Ensure·crypto-policies·is·installed | ||
| 272 | ··package: | ||
| 273 | ····name:·crypto-policies | ||
| 274 | ····state:·present | ||
| 275 | ··tags: | ||
| 276 | ··-·enable_strategy | ||
| 277 | ··-·low_complexity | ||
| 278 | ··-·low_disruption | ||
| 279 | ··-·medium_severity | ||
| 280 | ··-·no_reboot_needed | ||
| 281 | ··-·package_crypto-policies_installed | ||
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 267 | [[packages]] | 283 | [[packages]] |
| 268 | name·=·"crypto-policies" | 284 | name·=·"crypto-policies" |
| 269 | version·=·"*" | 285 | version·=·"*" |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 291 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 292 | ····yum·install·-y·"crypto-policies" | ||
| 293 | fi | ||
| 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 271 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 272 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 273 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 274 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 275 | include·install_crypto-policies | 299 | include·install_crypto-policies |
| 276 | class·install_crypto-policies·{ | 300 | class·install_crypto-policies·{ |
| 277 | ··package·{·'crypto-policies': | 301 | ··package·{·'crypto-policies': |
| 278 | ····ensure·=>·'installed', | 302 | ····ensure·=>·'installed', |
| 279 | ··} | 303 | ··} |
| 280 | } | 304 | } |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 286 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 287 | ····yum·install·-y·"crypto-policies" | ||
| 288 | fi | ||
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 294 | package·--add=crypto-policies | 310 | package·--add=crypto-policies |
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 300 | -·name:·Ensure·crypto-policies·is·installed | ||
| Max diff block lines reached; 599004/605037 bytes (99.00%) of diff not shown. | |||
| Offset 15136, 408 lines modified | Offset 15136, 408 lines modified | ||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | ||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b260:·6564·6961·7469·6f6e·20 | 0003b260:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b270:· | 0003b270:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b280:·3e3c | 0003b280:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b290:· | 0003b290:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b2a0:·6170 | 0003b2a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b2b0:·3 | 0003b2b0:·3539·3434·223e·3c74·6162·6c65·2063·6c61··5944"><table·cla | ||
| 0003b2c0:· | 0003b2c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b2d0:·7 | 0003b2d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b2e0:· | 0003b2e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b2f0:· | 0003b2f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b300:· | 0003b300:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b310:· | 0003b310:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b320:· | 0003b320:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b330:·7 | 0003b330:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b340:· | 0003b340:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b350:· | 0003b350:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b360:·6 | 0003b360:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b370:· | 0003b370:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b380:· | 0003b380:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b390:·65 | 0003b390:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b3a0:· | 0003b3a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b3b0:·6 | 0003b3b0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b3c0:·6 | 0003b3c0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b3d0:· | 0003b3d0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b3e0:· | 0003b3e0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b3f0:·7 | 0003b3f0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b400:·2 | 0003b400:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b410:· | 0003b410:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003b420:· | 0003b420:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003b430:· | 0003b430:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003b440:·2 | 0003b440:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b450:· | 0003b450:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003b460:· | 0003b460:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003b470:·2 | 0003b470:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b480:· | 0003b480:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003b490:· | 0003b490:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003b4a0:· | 0003b4a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b4b0:· | 0003b4b0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003b4c0:· | 0003b4c0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003b4d0:· | 0003b4d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003b4e0:· | 0003b4e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003b4f0:· | 0003b4f0:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003b500:·6 | 0003b500:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003b510:·6 | 0003b510:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003b520:· | 0003b520:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003b530:· | 0003b530:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003b540:· | 0003b540:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003b550:·7 | 0003b550:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003b560:·2 | 0003b560:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003b570:· | 0003b570:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003b580:· | 0003b580:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b590:· | 0003b590:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b5a0:· | 0003b5a0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b5b0:· | 0003b5b0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b5c0:·6 | 0003b5c0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b5d0:· | 0003b5d0:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b5e0:·6 | 0003b5e0:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b5f0:·6 | 0003b5f0:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003b600:· | 0003b600:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003b610:· | 0003b610:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b620:·6 | 0003b620:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003b630:·206 | 0003b630:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b640:· | 0003b640:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003b650:· | 0003b650:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003b660:· | 0003b660:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b670:· | 0003b670:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003b680:· | 0003b680:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003b690:· | 0003b690:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b6a0:· | 0003b6a0:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003b6b0:· | 0003b6b0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| 0003b6c0:· | 0003b6c0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003b6d0:· | 0003b6d0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003b6e0:· | 0003b6e0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003b6f0:·6 | 0003b6f0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003b700:·61 | 0003b700:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b710:· | 0003b710:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b720:· | 0003b720:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b730:· | 0003b730:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b740:· | 0003b740:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b750:·3 | 0003b750:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b760:· | 0003b760:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b770:· | 0003b770:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b780:· | 0003b780:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b790:· | 0003b790:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b7a0:· | 0003b7a0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b7b0:·3 | 0003b7b0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b7c0:· | 0003b7c0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b7d0:· | 0003b7d0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b7e0:·7 | 0003b7e0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b7f0:· | 0003b7f0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b800:·686 | 0003b800:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b810:· | 0003b810:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b820:· | 0003b820:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b830:· | 0003b830:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b840:· | 0003b840:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b850:·2 | 0003b850:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b860:· | 0003b860:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b870:· | 0003b870:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b880:· | 0003b880:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003b890:· | 0003b890:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003b8a0:· | 0003b8a0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·2028··nstall·command·( | ||
| 0003b8b0:· | 0003b8b0:·7a79·7070·6572·2927·0a20·2073·6574·5f66··zypper)'.··set_f | ||
| 0003b8c0:· | 0003b8c0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b8d0:·5 | 0003b8d0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b8e0:· | 0003b8e0:·6c6c·5f63·6d64·3a20·7a79·7070·6572·2069··ll_cmd:·zypper·i | ||
| 0003b8f0:·2d | 0003b8f0:·6e20·2d66·202d·790a·2020·7768·656e·3a0a··n·-f·-y.··when:. | ||
| 0003b900:· | 0003b900:·2020·2d20·6e6f·7420·2820·226b·6572·6e65····-·not·(·"kerne | ||
| 0003b910:· | 0003b910:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | ||
| 0003b920:· | 0003b920:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003b930:·2 | 0003b930:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | ||
| 0003b940:· | 0003b940:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b950:·6 | 0003b950:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | ||
| 0003b960:·2 | 0003b960:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | ||
| 0003b970:·6 | 0003b970:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003b980:·7 | 0003b980:·7320·616e·6420·6e6f·7420·226f·7065·6e73··s·and·not·"opens | ||
| 0003b990:· | 0003b990:·6869·6674·2d6b·7562·656c·6574·2220·696e··hift-kubelet"·in | ||
| 0003b9a0:·20 | 0003b9a0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003b9b0:· | 0003b9b0:·6163·6b61·6765·730a·2020·2020·290a·2020··ackages.····).·· | ||
| 0003b9c0:· | 0003b9c0:·2d20·616e·7369·626c·655f·6469·7374·7269··-·ansible_distri | ||
| Max diff block lines reached; 6290611/6345563 bytes (99.13%) of diff not shown. | |||
| Offset 101, 33 lines modified | Offset 101, 14 lines modified | ||
| 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 110 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 111 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 112 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 113 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 114 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 115 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 116 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 117 | fi | ||
| 118 | else | ||
| 119 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 120 | fi | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 126 | -·name:·Gather·the·package·facts | 113 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 114 | ··package_facts: |
| Offset 294, 14 lines modified | Offset 275, 33 lines modified | ||
| 294 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 295 | ··-·high_complexity | 276 | ··-·high_complexity |
| 296 | ··-·high_severity | 277 | ··-·high_severity |
| 297 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 298 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 299 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 300 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 296 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 303 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 297 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 304 | run·the·following·command·to·determine·which·package·owns·it: | 298 | run·the·following·command·to·determine·which·package·owns·it: |
| 305 | $·rpm·-qf·FILENAME | 299 | $·rpm·-qf·FILENAME |
| 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 307 | $·sudo·rpm·--restore·PACKAGENAME | 301 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 320, 46 lines modified | Offset 320, 14 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 342 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 343 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 344 | done | ||
| 345 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 346 | #·correct·values | ||
| 347 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 348 | do | ||
| 349 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 350 | done | ||
| 351 | else | ||
| 352 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 353 | fi | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 359 | -·name:·Gather·the·package·facts | 332 | -·name:·Gather·the·package·facts |
| 360 | ··package_facts: | 333 | ··package_facts: |
| Offset 467, 14 lines modified | Offset 435, 46 lines modified | ||
| 467 | ··-·PCI-DSSv4-11.5.2 | 435 | ··-·PCI-DSSv4-11.5.2 |
| 468 | ··-·high_complexity | 436 | ··-·high_complexity |
| 469 | ··-·high_severity | 437 | ··-·high_severity |
| 470 | ··-·medium_disruption | 438 | ··-·medium_disruption |
| 471 | ··-·no_reboot_needed | 439 | ··-·no_reboot_needed |
| 472 | ··-·restrict_strategy | 440 | ··-·restrict_strategy |
| 473 | ··-·rpm_verify_ownership | 441 | ··-·rpm_verify_ownership |
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 663519/671230 bytes (98.85%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b410:·7 | 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b420:·3c64 | 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b430:·6 | 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b440:·7073 | 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b450:· | 0003b450:·3934·3422·3e3c·7461·626c·6520·636c·6173··944"><table·clas | ||
| 0003b460:· | 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b470:·7 | 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b480:· | 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b490:·6 | 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b4a0:· | 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b4c0:· | 0003b4c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b4d0:· | 0003b4d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b4e0:·6 | 0003b4e0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b4f0:· | 0003b4f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b500:· | 0003b500:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b510:·2 | 0003b510:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b520:·7 | 0003b520:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b530:· | 0003b530:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b540:· | 0003b540:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b550:·65 | 0003b550:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003b560:·7 | 0003b560:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003b570:·6 | 0003b570:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003b580:· | 0003b580:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003b590:· | 0003b590:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003b5a0:·20 | 0003b5a0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b5b0:· | 0003b5b0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b5c0:· | 0003b5c0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b5d0:· | 0003b5d0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b5e0:·2 | 0003b5e0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b5f0:· | 0003b5f0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b600:· | 0003b600:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b610:·2 | 0003b610:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b620:· | 0003b620:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b630:· | 0003b630:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b640:· | 0003b640:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b650:·2 | 0003b650:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b660:· | 0003b660:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b670:· | 0003b670:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b680:· | 0003b680:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b690:· | 0003b690:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b6a0:·6 | 0003b6a0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b6b0:·6 | 0003b6b0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b6c0:·6 | 0003b6c0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003b6d0:· | 0003b6d0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003b6e0:· | 0003b6e0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003b6f0:·6 | 0003b6f0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003b700:·2 | 0003b700:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003b710:· | 0003b710:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003b720:· | 0003b720:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b730:·616 | 0003b730:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b740:· | 0003b740:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b750:· | 0003b750:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b760:·6 | 0003b760:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b770:·616 | 0003b770:·616c·6c5f·636d·643a·2079·756d·2072·6569··all_cmd:·yum·rei | ||
| 0003b780:· | 0003b780:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b790:· | 0003b790:·3a0a·2020·2d20·6e6f·7420·2820·226b·6572··:.··-·not·(·"ker | ||
| 0003b7a0:· | 0003b7a0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | ||
| 0003b7b0:· | 0003b7b0:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003b7c0:·6 | 0003b7c0:·6e64·2022·7270·6d2d·6f73·7472·6565·2220··nd·"rpm-ostree"· | ||
| 0003b7d0:·6 | 0003b7d0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b7e0:· | 0003b7e0:·2e70·6163·6b61·6765·730a·2020·2020·616e··.packages.····an | ||
| 0003b7f0:· | 0003b7f0:·6420·2262·6f6f·7463·2220·696e·2061·6e73··d·"bootc"·in·ans | ||
| 0003b800:· | 0003b800:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b810:· | 0003b810:·6765·7320·616e·6420·6e6f·7420·226f·7065··ges·and·not·"ope | ||
| 0003b820:·6 | 0003b820:·6e73·6869·6674·2d6b·7562·656c·6574·2220··nshift-kubelet"· | ||
| 0003b830:·6 | 0003b830:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b840:· | 0003b840:·2e70·6163·6b61·6765·730a·2020·2020·290a··.packages.····). | ||
| 0003b850:·20 | 0003b850:·2020·2d20·616e·7369·626c·655f·6469·7374····-·ansible_dist | ||
| 0003b860:· | 0003b860:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b870:· | 0003b870:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b880:· | 0003b880:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b890:· | 0003b890:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b8a0:· | 0003b8a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b8b0:· | 0003b8b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b8c0:· | 0003b8c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b8d0:· | 0003b8d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b8e0:· | 0003b8e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b8f0:· | 0003b8f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b900:· | 0003b900:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b910:· | 0003b910:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b920:· | 0003b920:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b930:· | 0003b930:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b940:· | 0003b940:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b950:· | 0003b950:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b960:· | 0003b960:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b970:· | 0003b970:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b980:· | 0003b980:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b990:· | 0003b990:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b9a0:·6 | 0003b9a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b9b0:· | 0003b9b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b9c0:· | 0003b9c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b9d0:·7 | 0003b9d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b9e0:· | 0003b9e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b9f0:· | 0003b9f0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003ba00:· | 0003ba00:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003ba10:·5 | 0003ba10:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003ba20:·202 | 0003ba20:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003ba30:· | 0003ba30:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003ba40:· | 0003ba40:·7374·616c·6c20·636f·6d6d·616e·6420·287a··stall·command·(z | ||
| 0003ba50:· | 0003ba50:·7970·7065·7229·270a·2020·7365·745f·6661··ypper)'.··set_fa | ||
| 0003ba60:· | 0003ba60:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003ba70:· | 0003ba70:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003ba80:· | 0003ba80:·6c5f·636d·643a·207a·7970·7065·7220·696e··l_cmd:·zypper·in | ||
| 0003ba90:· | 0003ba90:·202d·6620·2d79·0a20·2077·6865·6e3a·0a20···-f·-y.··when:.· | ||
| 0003baa0:· | 0003baa0:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003bab0:·2 | 0003bab0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003bac0:· | 0003bac0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003bad0:· | 0003bad0:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003bae0:·6 | 0003bae0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003baf0:·6 | 0003baf0:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003bb00:· | 0003bb00:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003bb10:·6 | 0003bb10:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bb20:· | 0003bb20:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003bb30:· | 0003bb30:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003bb40:· | 0003bb40:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bb50:·6 | 0003bb50:·636b·6167·6573·0a20·2020·2029·0a20·202d··ckages.····).··- | ||
| 0003bb60:· | 0003bb60:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| Max diff block lines reached; 15896768/15951720 bytes (99.66%) of diff not shown. | |||
| Offset 108, 33 lines modified | Offset 108, 14 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 121 | ··package_facts: |
| Offset 301, 14 lines modified | Offset 282, 33 lines modified | ||
| 301 | ··-·PCI-DSSv4-11.5.2 | 282 | ··-·PCI-DSSv4-11.5.2 |
| 302 | ··-·high_complexity | 283 | ··-·high_complexity |
| 303 | ··-·high_severity | 284 | ··-·high_severity |
| 304 | ··-·medium_disruption | 285 | ··-·medium_disruption |
| 305 | ··-·no_reboot_needed | 286 | ··-·no_reboot_needed |
| 306 | ··-·restrict_strategy | 287 | ··-·restrict_strategy |
| 307 | ··-·rpm_verify_hashes | 288 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 312 | $·rpm·-qf·FILENAME | 306 | $·rpm·-qf·FILENAME |
| 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 50 lines modified | Offset 329, 14 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 372 | -·name:·Gather·the·package·facts | 341 | -·name:·Gather·the·package·facts |
| 373 | ··package_facts: | 342 | ··package_facts: |
| Offset 484, 14 lines modified | Offset 448, 50 lines modified | ||
| 484 | ··-·PCI-DSSv4-11.5.2 | 448 | ··-·PCI-DSSv4-11.5.2 |
| 485 | ··-·high_complexity | 449 | ··-·high_complexity |
| 486 | ··-·high_severity | 450 | ··-·high_severity |
| 487 | ··-·medium_disruption | 451 | ··-·medium_disruption |
| 488 | ··-·no_reboot_needed | 452 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 453 | ··-·restrict_strategy |
| 490 | ··-·rpm_verify_permissions | 454 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1239684/1247768 bytes (99.35%) of diff not shown. | |||
| Offset 15173, 408 lines modified | Offset 15173, 408 lines modified | ||
| 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | ||
| 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4b0:·6961·7469·6f6e·20 | 0003b4b0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b4c0:·6970·7420 | 0003b4c0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b4d0:·6469 | 0003b4d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b4e0:· | 0003b4e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b4f0:·7365 | 0003b4f0:·6c61·7073·6522·2069·643d·2269·646d·3539··lapse"·id="idm59 | ||
| 0003b500:·3 | 0003b500:·3434·223e·3c74·6162·6c65·2063·6c61·7373··44"><table·class | ||
| 0003b510:· | 0003b510:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b520:· | 0003b520:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b530:·6 | 0003b530:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b540:· | 0003b540:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b550:· | 0003b550:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b560:· | 0003b560:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b570:· | 0003b570:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b580:· | 0003b580:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b590:· | 0003b590:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b5a0:· | 0003b5a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b5b0:·3 | 0003b5b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b5c0:· | 0003b5c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b5d0:· | 0003b5d0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b5e0:· | 0003b5e0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b5f0:·2 | 0003b5f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b600:· | 0003b600:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b610:·20 | 0003b610:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b620:·74 | 0003b620:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b630:· | 0003b630:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b640:· | 0003b640:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b650:· | 0003b650:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b660:· | 0003b660:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b670:· | 0003b670:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003b680:· | 0003b680:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003b690:· | 0003b690:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003b6a0:·2d | 0003b6a0:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003b6b0:· | 0003b6b0:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003b6c0:· | 0003b6c0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b6d0:· | 0003b6d0:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003b6e0:· | 0003b6e0:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003b6f0:· | 0003b6f0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b700:· | 0003b700:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003b710:· | 0003b710:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003b720:· | 0003b720:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003b730:· | 0003b730:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003b740:·2 | 0003b740:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003b750:·6 | 0003b750:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003b760:· | 0003b760:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003b770:· | 0003b770:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003b780:· | 0003b780:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003b790:·6 | 0003b790:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003b7a0:· | 0003b7a0:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003b7b0:· | 0003b7b0:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003b7c0:· | 0003b7c0:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003b7d0:·6 | 0003b7d0:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b7e0:·6 | 0003b7e0:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b7f0:· | 0003b7f0:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b800:·6 | 0003b800:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b810:· | 0003b810:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b820:·6 | 0003b820:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003b830:· | 0003b830:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b840:· | 0003b840:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003b850:·6 | 0003b850:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003b860:· | 0003b860:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003b870:·6 | 0003b870:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003b880:·6 | 0003b880:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b890:· | 0003b890:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003b8a0:· | 0003b8a0:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003b8b0:· | 0003b8b0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b8c0:·6 | 0003b8c0:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003b8d0:·7 | 0003b8d0:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003b8e0:· | 0003b8e0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b8f0:· | 0003b8f0:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003b900:· | 0003b900:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| 0003b910:·6 | 0003b910:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b920:·6 | 0003b920:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b930:· | 0003b930:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b940:· | 0003b940:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b950:·733 | 0003b950:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b960:· | 0003b960:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b970:· | 0003b970:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b980:· | 0003b980:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b990:· | 0003b990:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b9a0:· | 0003b9a0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b9b0:· | 0003b9b0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b9c0:·6 | 0003b9c0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b9d0:· | 0003b9d0:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b9e0:· | 0003b9e0:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b9f0:· | 0003b9f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba00:· | 0003ba00:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003ba10:· | 0003ba10:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003ba20:· | 0003ba20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003ba30:·3 | 0003ba30:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003ba40:· | 0003ba40:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003ba50:· | 0003ba50:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003ba60:· | 0003ba60:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003ba70:· | 0003ba70:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003ba80:· | 0003ba80:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003ba90:· | 0003ba90:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003baa0:· | 0003baa0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003bab0:· | 0003bab0:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003bac0:· | 0003bac0:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003bad0:·2 | 0003bad0:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003bae0:· | 0003bae0:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003baf0:· | 0003baf0:·7461·6c6c·2063·6f6d·6d61·6e64·2028·7a79··tall·command·(zy | ||
| 0003bb00:· | 0003bb00:·7070·6572·2927·0a20·2073·6574·5f66·6163··pper)'.··set_fac | ||
| 0003bb10:· | 0003bb10:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003bb20:· | 0003bb20:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003bb30:· | 0003bb30:·5f63·6d64·3a20·7a79·7070·6572·2069·6e20··_cmd:·zypper·in· | ||
| 0003bb40:·2 | 0003bb40:·2d66·202d·790a·2020·7768·656e·3a0a·2020··-f·-y.··when:.·· | ||
| 0003bb50:·2d | 0003bb50:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003bb60:· | 0003bb60:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bb70:· | 0003bb70:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003bb80:· | 0003bb80:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003bb90:·6 | 0003bb90:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bba0:·6 | 0003bba0:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003bbb0:·6 | 0003bbb0:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003bbc0:· | 0003bbc0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bbd0:·6 | 0003bbd0:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003bbe0:·6 | 0003bbe0:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003bbf0:· | 0003bbf0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bc00:·6 | 0003bc00:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003bc10:· | 0003bc10:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| Max diff block lines reached; 11231643/11286595 bytes (99.51%) of diff not shown. | |||
| Offset 109, 33 lines modified | Offset 109, 14 lines modified | ||
| 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·Gather·the·package·facts | 121 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 122 | ··package_facts: |
| Offset 302, 14 lines modified | Offset 283, 33 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 283 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 284 | ··-·high_complexity |
| 304 | ··-·high_severity | 285 | ··-·high_severity |
| 305 | ··-·medium_disruption | 286 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 287 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 288 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 289 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 310 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 311 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 312 | run·the·following·command·to·determine·which·package·owns·it: | 306 | run·the·following·command·to·determine·which·package·owns·it: |
| 313 | $·rpm·-qf·FILENAME | 307 | $·rpm·-qf·FILENAME |
| 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 315 | $·sudo·rpm·--restore·PACKAGENAME | 309 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 328, 46 lines modified | Offset 328, 14 lines modified | ||
| 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 340 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 341 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 342 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 343 | declare·-A·SETPERMS_RPM_DICT | ||
| 344 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 345 | #·is·expected·by·the·RPM·database | ||
| 346 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 347 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 348 | do | ||
| 349 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 350 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 351 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 367 | -·name:·Gather·the·package·facts | 340 | -·name:·Gather·the·package·facts |
| 368 | ··package_facts: | 341 | ··package_facts: |
| Offset 475, 14 lines modified | Offset 443, 46 lines modified | ||
| 475 | ··-·PCI-DSSv4-11.5.2 | 443 | ··-·PCI-DSSv4-11.5.2 |
| 476 | ··-·high_complexity | 444 | ··-·high_complexity |
| 477 | ··-·high_severity | 445 | ··-·high_severity |
| 478 | ··-·medium_disruption | 446 | ··-·medium_disruption |
| 479 | ··-·no_reboot_needed | 447 | ··-·no_reboot_needed |
| 480 | ··-·restrict_strategy | 448 | ··-·restrict_strategy |
| 481 | ··-·rpm_verify_ownership | 449 | ··-·rpm_verify_ownership |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1119968/1127679 bytes (99.32%) of diff not shown. | |||
| Offset 15009, 258 lines modified | Offset 15009, 258 lines modified | ||
| 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | ||
| 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aa70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aa80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aa90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aaa0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aab0:·2069·643d·2269·646d·3637·3731·223e·3c74···id="idm6771"><t | |||
| 0003aac0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aad0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aae0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aaf0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ab00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003aa70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003aa80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aa90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aaa0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aab0:·3d22·6964·6d36·3737·3122·3e3c·7072·653e··="idm6771"><pre> | |||
| 0003aac0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003aad0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003aae0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003aaf0:·6e20·706c·6174·666f·726d·730a·6966·2028··n·platforms.if·( | |||
| 0003ab00:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003ab10:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003ab20:·702d·6f73·6275·696c·6422·205d·2029·2026··p-osbuild"·]·)·& | |||
| 0003ab30:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 0003ab40:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | |||
| 0003ab50:·7c7c·2072·706d·202d·2d71·7569·6574·202d··||·rpm·--quiet·- | |||
| 0003ab60:·7120·6b65·726e·656c·2d75·656b·2029·2026··q·kernel-uek·)·& | |||
| 0003ab70:·616d·703b·2661·6d70·3b20·7b20·2120·2820··amp;&·{·!·(· | |||
| 0003ab80:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003ab90:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | |||
| 0003aba0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | |||
| 0003abb0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | |||
| 0003abc0:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | |||
| 0003abd0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003abe0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | |||
| 0003abf0:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | |||
| 0003ac00:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | |||
| 0003ac10:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | |||
| 0003ac20:·7d3b·2074·6865·6e0a·0a66·6970·732d·6d6f··};·then..fips-mo | |||
| 0003ac30:·6465·2d73·6574·7570·202d·2d65·6e61·626c··de-setup·--enabl | |||
| 0003ac40:·650a·4649·5053·5f43·4f4e·463d·222f·6574··e.FIPS_CONF="/et | |||
| 0003ac50:·632f·6472·6163·7574·2e63·6f6e·662e·642f··c/dracut.conf.d/ | |||
| 0003ac60:·3430·2d66·6970·732e·636f·6e66·220a·6966··40-fips.conf".if | |||
| 0003ac70:·2021·2067·7265·7020·225e·6164·645f·6472···!·grep·"^add_dr | |||
| 0003ac80:·6163·7574·6d6f·6475·6c65·732b·3d5c·2220··acutmodules+=\"· | |||
| 0003ac90:·6669·7073·205c·2222·2024·4649·5053·5f43··fips·\""·$FIPS_C | |||
| 0003aca0:·4f4e·463b·2074·6865·6e0a·2020·2020·6563··ONF;·then.····ec | |||
| 0003acb0:·686f·2022·6164·645f·6472·6163·7574·6d6f··ho·"add_dracutmo | |||
| 0003acc0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003acd0:·2222·2026·6774·3b26·6774·3b20·2446·4950··""·>>·$FIP | |||
| 0003ace0:·535f·434f·4e46·0a66·690a·0a65·6c73·650a··S_CONF.fi..else. | |||
| 0003acf0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003ad00:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003ad10:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003ad20:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003ad30:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003ad40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ad70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ad80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad90:·3737·3222·2074·6162·696e·6465·783d·2230··772"·tabindex="0 | |||
| 0003ada0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003adb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003adc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003add0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ade0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003adf0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003ae00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae30:·6c61·7073·6522·2069·643d·2269·646d·3637··lapse"·id="idm67 | |||
| 0003ae40:·3732·223e·3c74·6162·6c65·2063·6c61·7373··72"><table·class | |||
| 0003ae50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ae60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aea0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a | 0003ab10:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | ||
| 0003a | 0003ab20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003aee0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a | 0003ab30:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003ab40:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003a | 0003ab50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a | 0003ab60:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003a | 0003ab70:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | ||
| 0003af30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003af40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003af50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003af60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003a | 0003ab80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003ab90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003aba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003abb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003abc0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003abd0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003abe0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003abf0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003ac00:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003ac10:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003a | 0003ac20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003a | 0003ac30:·2d49·412d·370a·2020·2d20·4e49·5354·2d38··-IA-7.··-·NIST-8 | ||
| 0003a | 0003ac40:·3030·2d35·332d·5343·2d31·320a·2020·2d20··00-53-SC-12.··-· | ||
| 0003a | 0003ac50:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | ||
| 0003ac60:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003ac70:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003ac80:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003ac90:·2d31·330a·2020·2d20·656e·6162·6c65·5f64··-13.··-·enable_d | |||
| 0003aca0:·7261·6375·745f·6669·7073·5f6d·6f64·756c··racut_fips_modul | |||
| 0003acb0:·650a·2020·2d20·6869·6768·5f73·6576·6572··e.··-·high_sever | |||
| 0003acc0:·6974·790a·2020·2d20·6d65·6469·756d·5f63··ity.··-·medium_c | |||
| 0003acd0:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | |||
| 0003ace0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003acf0:·2020·2d20·7265·626f·6f74·5f72·6571·7569····-·reboot_requi | |||
| 0003ad00:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | |||
| 0003ad10:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 0003ad20:·653a·2043·6865·636b·2074·6f20·7365·6520··e:·Check·to·see· | |||
| 0003ad30:·7468·6520·6375·7272·656e·7420·7374·6174··the·current·stat | |||
| Max diff block lines reached; 4985725/5019977 bytes (99.32%) of diff not shown. | |||
| Offset 89, 27 lines modified | Offset 89, 14 lines modified | ||
| 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 91 | ············_\x8i_\x8s_\x8m······1446 | 91 | ············_\x8i_\x8s_\x8m······1446 |
| 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 97 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 98 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 99 | fips-mode-setup·--enable | ||
| 100 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 101 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 102 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 103 | fi | ||
| 104 | else | ||
| 105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 106 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 112 | -·name:·Gather·the·package·facts | 101 | -·name:·Gather·the·package·facts |
| 113 | ··package_facts: | 102 | ··package_facts: |
| Offset 195, 14 lines modified | Offset 182, 27 lines modified | ||
| 195 | ··-·NIST-800-53-SC-13 | 182 | ··-·NIST-800-53-SC-13 |
| 196 | ··-·enable_dracut_fips_module | 183 | ··-·enable_dracut_fips_module |
| 197 | ··-·high_severity | 184 | ··-·high_severity |
| 198 | ··-·medium_complexity | 185 | ··-·medium_complexity |
| 199 | ··-·medium_disruption | 186 | ··-·medium_disruption |
| 200 | ··-·reboot_required | 187 | ··-·reboot_required |
| 201 | ··-·restrict_strategy | 188 | ··-·restrict_strategy |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 192 | fips-mode-setup·--enable | ||
| 193 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 194 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 195 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | To·enable·FIPS·mode,·run·the·following·command: | 201 | To·enable·FIPS·mode,·run·the·following·command: |
| 204 | fips-mode-setup·--enable | 202 | fips-mode-setup·--enable |
| 205 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 203 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 206 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 204 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 207 | ····*·Creating·/etc/system-fips | 205 | ····*·Creating·/etc/system-fips |
| Offset 251, 63 lines modified | Offset 251, 63 lines modified | ||
| 251 | $·sudo·yum·install·crypto-policies | 251 | $·sudo·yum·install·crypto-policies |
| 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 253 | Severity: ··medium | 253 | Severity: ··medium |
| 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 263 | -·name:·Ensure·crypto-policies·is·installed | ||
| 264 | ··package: | ||
| 265 | ····name:·crypto-policies | ||
| 266 | ····state:·present | ||
| 267 | ··tags: | ||
| 268 | ··-·enable_strategy | ||
| 269 | ··-·low_complexity | ||
| 270 | ··-·low_disruption | ||
| 271 | ··-·medium_severity | ||
| 272 | ··-·no_reboot_needed | ||
| 273 | ··-·package_crypto-policies_installed | ||
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 259 | [[packages]] | 275 | [[packages]] |
| 260 | name·=·"crypto-policies" | 276 | name·=·"crypto-policies" |
| 261 | version·=·"*" | 277 | version·=·"*" |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 283 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 284 | ····yum·install·-y·"crypto-policies" | ||
| 285 | fi | ||
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 267 | include·install_crypto-policies | 291 | include·install_crypto-policies |
| 268 | class·install_crypto-policies·{ | 292 | class·install_crypto-policies·{ |
| 269 | ··package·{·'crypto-policies': | 293 | ··package·{·'crypto-policies': |
| 270 | ····ensure·=>·'installed', | 294 | ····ensure·=>·'installed', |
| 271 | ··} | 295 | ··} |
| 272 | } | 296 | } |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 275 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 276 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 277 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 278 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 279 | ····yum·install·-y·"crypto-policies" | ||
| 280 | fi | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 286 | package·--add=crypto-policies | 302 | package·--add=crypto-policies |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 292 | -·name:·Ensure·crypto-policies·is·installed | ||
| Max diff block lines reached; 599004/605037 bytes (99.00%) of diff not shown. | |||
| Offset 15161, 408 lines modified | Offset 15161, 408 lines modified | ||
| 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | ||
| 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3f0:·6d65·6469·6174·696f·6e20· | 0003b3f0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b400:·736 | 0003b400:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b410:·723e | 0003b410:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b420:· | 0003b420:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b430:·6c6 | 0003b430:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b440:·3 | 0003b440:·6d35·3934·3422·3e3c·7461·626c·6520·636c··m5944"><table·cl | ||
| 0003b450:· | 0003b450:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b460:· | 0003b460:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b470:·6 | 0003b470:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b480:·6 | 0003b480:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b490:· | 0003b490:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b4a0:· | 0003b4a0:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b4b0:· | 0003b4b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b4c0:· | 0003b4c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b4d0:· | 0003b4d0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b4e0:· | 0003b4e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b4f0:·746 | 0003b4f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b500:· | 0003b500:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b510:· | 0003b510:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b520:· | 0003b520:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b530:· | 0003b530:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b540:·6 | 0003b540:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b550:·6 | 0003b550:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b560:· | 0003b560:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b570:·66 | 0003b570:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b580:·6 | 0003b580:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b590:· | 0003b590:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b5a0:· | 0003b5a0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b5b0:· | 0003b5b0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b5c0:·5 | 0003b5c0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b5d0:· | 0003b5d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b5e0:· | 0003b5e0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b5f0:· | 0003b5f0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b600:· | 0003b600:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b610:· | 0003b610:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b620:· | 0003b620:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b630:· | 0003b630:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b640:· | 0003b640:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b650:· | 0003b650:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b660:· | 0003b660:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b670:·2 | 0003b670:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b680:· | 0003b680:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b690:· | 0003b690:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b6a0:·6 | 0003b6a0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b6b0:· | 0003b6b0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b6c0:· | 0003b6c0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b6d0:·7 | 0003b6d0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b6e0:· | 0003b6e0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b6f0:·2 | 0003b6f0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b700:· | 0003b700:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b710:· | 0003b710:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b720:· | 0003b720:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b730:·6c | 0003b730:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b740:· | 0003b740:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b750:· | 0003b750:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b760:· | 0003b760:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b770:· | 0003b770:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b780:·6 | 0003b780:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b790:· | 0003b790:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b7a0:·6 | 0003b7a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b7b0:· | 0003b7b0:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b7c0:·2220·6 | 0003b7c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b7d0:· | 0003b7d0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b7e0:· | 0003b7e0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b7f0:·6 | 0003b7f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b800:·6 | 0003b800:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b810:· | 0003b810:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b820:· | 0003b820:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b830:· | 0003b830:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b840:· | 0003b840:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| 0003b850:· | 0003b850:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b860:· | 0003b860:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b870:·2 | 0003b870:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b880:· | 0003b880:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b890:· | 0003b890:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b8a0:· | 0003b8a0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b8b0:· | 0003b8b0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b8c0:· | 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b8d0:· | 0003b8d0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b8e0:· | 0003b8e0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b8f0:·2 | 0003b8f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b900:· | 0003b900:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b910:· | 0003b910:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b920:· | 0003b920:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b930:·2 | 0003b930:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b940:· | 0003b940:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b950:· | 0003b950:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b960:·3 | 0003b960:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b970:· | 0003b970:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b980:· | 0003b980:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b990:· | 0003b990:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b9a0:· | 0003b9a0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b9b0:· | 0003b9b0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b9c0:· | 0003b9c0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b9d0:· | 0003b9d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003b9e0:· | 0003b9e0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003b9f0:· | 0003b9f0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003ba00:· | 0003ba00:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003ba10:· | 0003ba10:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003ba20:· | 0003ba20:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003ba30:· | 0003ba30:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | ||
| 0003ba40:·2 | 0003ba40:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | ||
| 0003ba50:· | 0003ba50:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003ba60:· | 0003ba60:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003ba70:· | 0003ba70:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | ||
| 0003ba80:· | 0003ba80:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | ||
| 0003ba90:· | 0003ba90:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003baa0:· | 0003baa0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003bab0:· | 0003bab0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003bac0:· | 0003bac0:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003bad0:·6 | 0003bad0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bae0:· | 0003bae0:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003baf0:·202 | 0003baf0:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003bb00:· | 0003bb00:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bb10:·6 | 0003bb10:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003bb20:·73 | 0003bb20:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003bb30:· | 0003bb30:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bb40:·61 | 0003bb40:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003bb50:· | 0003bb50:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| Max diff block lines reached; 16251045/16305997 bytes (99.66%) of diff not shown. | |||
| Offset 106, 33 lines modified | Offset 106, 14 lines modified | ||
| 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 115 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 116 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 117 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 118 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 119 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 120 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 121 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 122 | fi | ||
| 123 | else | ||
| 124 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 131 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 132 | ··package_facts: | 119 | ··package_facts: |
| Offset 299, 14 lines modified | Offset 280, 33 lines modified | ||
| 299 | ··-·PCI-DSSv4-11.5.2 | 280 | ··-·PCI-DSSv4-11.5.2 |
| 300 | ··-·high_complexity | 281 | ··-·high_complexity |
| 301 | ··-·high_severity | 282 | ··-·high_severity |
| 302 | ··-·medium_disruption | 283 | ··-·medium_disruption |
| 303 | ··-·no_reboot_needed | 284 | ··-·no_reboot_needed |
| 304 | ··-·restrict_strategy | 285 | ··-·restrict_strategy |
| 305 | ··-·rpm_verify_hashes | 286 | ··-·rpm_verify_hashes |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 288 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 289 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 290 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 291 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 292 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 293 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 294 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 295 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 296 | fi | ||
| 297 | else | ||
| 298 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 299 | fi | ||
| 306 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 307 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 301 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 308 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 302 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 309 | run·the·following·command·to·determine·which·package·owns·it: | 303 | run·the·following·command·to·determine·which·package·owns·it: |
| 310 | $·rpm·-qf·FILENAME | 304 | $·rpm·-qf·FILENAME |
| 311 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 305 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 312 | $·sudo·rpm·--restore·PACKAGENAME | 306 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 325, 46 lines modified | Offset 325, 14 lines modified | ||
| 325 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 325 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 326 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 326 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 337 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 338 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 339 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 340 | declare·-A·SETPERMS_RPM_DICT | ||
| 341 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 342 | #·is·expected·by·the·RPM·database | ||
| 343 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 344 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 345 | do | ||
| 346 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 347 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 348 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 349 | done | ||
| 350 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 351 | #·correct·values | ||
| 352 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 353 | do | ||
| 354 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 355 | done | ||
| 356 | else | ||
| 357 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 358 | fi | ||
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 364 | -·name:·Gather·the·package·facts | 337 | -·name:·Gather·the·package·facts |
| 365 | ··package_facts: | 338 | ··package_facts: |
| Offset 472, 14 lines modified | Offset 440, 46 lines modified | ||
| 472 | ··-·PCI-DSSv4-11.5.2 | 440 | ··-·PCI-DSSv4-11.5.2 |
| 473 | ··-·high_complexity | 441 | ··-·high_complexity |
| 474 | ··-·high_severity | 442 | ··-·high_severity |
| 475 | ··-·medium_disruption | 443 | ··-·medium_disruption |
| 476 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 477 | ··-·restrict_strategy | 445 | ··-·restrict_strategy |
| 478 | ··-·rpm_verify_ownership | 446 | ··-·rpm_verify_ownership |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1561137/1568716 bytes (99.52%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003afa0:·6c6 | 0003afa0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003afb0:·3e3c | 0003afb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003afc0:·2270 | 0003afc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003afd0:·6 | 0003afd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003afe0:·6 | 0003afe0:·2269·646d·3539·3434·223e·3c74·6162·6c65··"idm5944"><table | ||
| 0003aff0:· | 0003aff0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b000:·6 | 0003b000:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b010:·6 | 0003b010:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b020:· | 0003b020:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b030:· | 0003b030:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b040:· | 0003b040:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b050:· | 0003b050:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b060:· | 0003b060:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b070:· | 0003b070:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b080:· | 0003b080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b090:· | 0003b090:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b0a0:· | 0003b0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b0b0:· | 0003b0b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b0c0:· | 0003b0c0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b0d0:· | 0003b0d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b0e0:·6 | 0003b0e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b0f0:· | 0003b0f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b100:· | 0003b100:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b110:·6 | 0003b110:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b120:· | 0003b120:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b130:·6 | 0003b130:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b140:· | 0003b140:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b150:· | 0003b150:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b160:· | 0003b160:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b170:· | 0003b170:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b180:·2 | 0003b180:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b190:· | 0003b190:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b1a0:· | 0003b1a0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b1b0:·2 | 0003b1b0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b1c0:· | 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b1d0:· | 0003b1d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b1e0:· | 0003b1e0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b1f0:· | 0003b1f0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b200:· | 0003b200:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b210:·2 | 0003b210:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b220:· | 0003b220:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b230:·6 | 0003b230:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b240:· | 0003b240:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b250:· | 0003b250:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b260:· | 0003b260:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b270:·6 | 0003b270:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b280:·7 | 0003b280:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b290:· | 0003b290:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b2a0:· | 0003b2a0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b2b0:· | 0003b2b0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b2c0:·6 | 0003b2c0:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b2d0:· | 0003b2d0:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b2e0:· | 0003b2e0:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b2f0:·6 | 0003b2f0:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b300:· | 0003b300:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7975··einstall_cmd:·yu | ||
| 0003b310:·6 | 0003b310:·6d20·7265·696e·7374·616c·6c20·2d79·0a20··m·reinstall·-y.· | ||
| 0003b320:· | 0003b320:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b330:· | 0003b330:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b340:· | 0003b340:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b350:· | 0003b350:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b360:·7 | 0003b360:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b370:· | 0003b370:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b380:· | 0003b380:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b390:· | 0003b390:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b3a0:· | 0003b3a0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003b3b0:· | 0003b3b0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003b3c0:· | 0003b3c0:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003b3d0:· | 0003b3d0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b3e0:· | 0003b3e0:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003b3f0:· | 0003b3f0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b400:· | 0003b400:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b410:· | 0003b410:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b420:· | 0003b420:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b430:· | 0003b430:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b440:· | 0003b440:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b450:· | 0003b450:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b460:· | 0003b460:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b470:·3 | 0003b470:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b480:· | 0003b480:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b490:· | 0003b490:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b4a0:· | 0003b4a0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b4b0:· | 0003b4b0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b4c0:· | 0003b4c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b4d0:· | 0003b4d0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b4e0:·3 | 0003b4e0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b4f0:· | 0003b4f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b500:· | 0003b500:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b510:· | 0003b510:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b520:· | 0003b520:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b530:·20 | 0003b530:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b540:·6 | 0003b540:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b550:·6 | 0003b550:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b560:· | 0003b560:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b570:·6 | 0003b570:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b580:· | 0003b580:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003b590:· | 0003b590:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003b5a0:· | 0003b5a0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003b5b0:· | 0003b5b0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003b5c0:· | 0003b5c0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003b5d0:·20 | 0003b5d0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003b5e0:· | 0003b5e0:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003b5f0:· | 0003b5f0:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b600:· | 0003b600:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b610:· | 0003b610:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003b620:· | 0003b620:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003b630:· | 0003b630:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b640:· | 0003b640:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b650:· | 0003b650:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b660:· | 0003b660:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b670:· | 0003b670:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b680:· | 0003b680:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b690:· | 0003b690:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b6a0:· | 0003b6a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b6b0:·6 | 0003b6b0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b6c0:· | 0003b6c0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b6d0:· | 0003b6d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b6e0:·7 | 0003b6e0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b6f0:· | 0003b6f0:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 9446850/9501802 bytes (99.42%) of diff not shown. | |||
| Offset 93, 33 lines modified | Offset 93, 14 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 118 | -·name:·Gather·the·package·facts | 105 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 106 | ··package_facts: |
| Offset 286, 14 lines modified | Offset 267, 33 lines modified | ||
| 286 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 287 | ··-·high_complexity | 268 | ··-·high_complexity |
| 288 | ··-·high_severity | 269 | ··-·high_severity |
| 289 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 290 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 291 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 292 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 297 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 50 lines modified | Offset 314, 14 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 357 | -·name:·Gather·the·package·facts | 326 | -·name:·Gather·the·package·facts |
| 358 | ··package_facts: | 327 | ··package_facts: |
| Offset 469, 14 lines modified | Offset 433, 50 lines modified | ||
| 469 | ··-·PCI-DSSv4-11.5.2 | 433 | ··-·PCI-DSSv4-11.5.2 |
| 470 | ··-·high_complexity | 434 | ··-·high_complexity |
| 471 | ··-·high_severity | 435 | ··-·high_severity |
| 472 | ··-·medium_disruption | 436 | ··-·medium_disruption |
| 473 | ··-·no_reboot_needed | 437 | ··-·no_reboot_needed |
| 474 | ··-·restrict_strategy | 438 | ··-·restrict_strategy |
| 475 | ··-·rpm_verify_permissions | 439 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 767810/775892 bytes (98.96%) of diff not shown. | |||
| Offset 15067, 218 lines modified | Offset 15067, 218 lines modified | ||
| 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | ||
| 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003ae10:·6564·6961·7469·6f6e·204 | 0003ae10:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003ae20:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ae30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ae40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ae50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae60:·3632·3739·223e·3c74·6162·6c65·2063·6c61··6279"><table·cla | |||
| 0003ae70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ae80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ae90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003aea0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003aeb0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003aec0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003aed0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ae20:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003ae30:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae40:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ae50:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ae60:·6522·2069·643d·2269·646d·3632·3739·223e··e"·id="idm6279"> | |||
| 0003ae70:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ae80:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ae90:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003aea0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003aeb0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003aec0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003aed0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003aee0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003aef0:·6172·6765·743d·2223·6964·6d36·3238·3022··arget="#idm6280" | |||
| 0003af00:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003af10:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003af20:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003af30:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003af40:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003af50:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003af60:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003af70:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003af80:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003af90:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003afa0:·2220·6964·3d22·6964·6d36·3238·3022·3e3c··"·id="idm6280">< | |||
| 0003afb0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003afc0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003afd0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003afe0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003aff0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003 | 0003aee0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003 | 0003aef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b020:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b030:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003 | 0003af00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003af10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003af20:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003 | 0003af30:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b060:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b070:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b080:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b090:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b0a0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b0b0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b0c0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b0d0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b0e0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b0f0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003 | 0003af40:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003af50:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003af60:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003af70:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003af80:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003af90:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003afa0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003afb0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003afc0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003afd0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003afe0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003aff0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b000:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b010:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b020:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b030:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b040:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b050:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b060:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b070:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b080:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b090:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b0a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b0b0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b0c0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b0d0:·6e3a·2028·226b·6572·6e65·6c22·2069·6e20··n:·("kernel"·in· | |||
| 0003b0e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b0f0:·636b·6167·6573·206f·7220·226b·6572·6e65··ckages·or·"kerne | |||
| 0003b100:·6c2d·7565·6b22·2069·6e20·616e·7369·626c··l-uek"·in·ansibl | |||
| 0003b110:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b120:·290a·2020·7461·6773·3a0a·2020·2d20·434a··).··tags:.··-·CJ | |||
| 0003b130:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b140:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b150:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b160:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b170:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b180:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b190:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b1a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b1b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b1c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b1d0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b1e0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b1f0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b200:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b120 | 0003b210:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003b220:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003b230:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003b240:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b | 0003b250:·646d·3632·3830·2220·7461·6269·6e64·6578··dm6280"·tabindex | ||
| 0003b | 0003b260:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b | 0003b270:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b | 0003b280:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b | 0003b290:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b | 0003b2a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b2b0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b2c0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b2d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b2e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| Max diff block lines reached; 31668678/31697410 bytes (99.91%) of diff not shown. | |||
| Offset 15085, 217 lines modified | Offset 15085, 217 lines modified | ||
| 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | ||
| 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af30:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af70:·7073·6522·2069·643d·2269·646d·3632·3739··pse"·id="idm6279 | |||
| 0003af80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003af90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afa0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afc0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003afd0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003afe0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aff0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af30:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003af40:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af50:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af60:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af70:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003af80:·643d·2269·646d·3632·3739·223e·3c70·7265··d="idm6279"><pre | |||
| 0003af90:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afa0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afb0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003afc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003afd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003afe0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003aff0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b000:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b010:·743d·2223·6964·6d36·3238·3022·2074·6162··t="#idm6280"·tab | |||
| 0003b020:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b030:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b040:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b050:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b060:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b070:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b080:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b090:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b0b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b0c0:·3d22·6964·6d36·3238·3022·3e3c·7461·626c··="idm6280"><tabl | |||
| 0003b0d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b0e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b0f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b100:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b110:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b000:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b010:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b020:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b030:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b040:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b050:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003b180:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b190:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b1a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b1b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b1c0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b1d0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b1e0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b1f0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b200:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b210:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b | 0003b060:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b070:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b080:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b090:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b0a0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b0b0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b0c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0d0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b0e0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b0f0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b100:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b110:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b120:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b130:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b140:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b150:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b160:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b170:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b180:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b190:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b1a0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b1b0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b1c0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b1d0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b1e0:·7265·7365·6e74·0a20·2077·6865·6e3a·2028··resent.··when:·( | |||
| 0003b1f0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b200:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b210:·6573·206f·7220·226b·6572·6e65·6c2d·7565··es·or·"kernel-ue | |||
| 0003b220:·6b22·2069·6e20·616e·7369·626c·655f·6661··k"·in·ansible_fa | |||
| 0003b230:·6374·732e·7061·636b·6167·6573·290a·2020··cts.packages).·· | |||
| 0003b240:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b250:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b260:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b270:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b280:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b290:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2a0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2b0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b2c0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b2d0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b2e0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b2f0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b300:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b310:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b | 0003b320:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b330:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b340:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b350:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b360:·612d·7461·7267·6574·3d22·2369·646d·3632··a-target="#idm62 | ||
| 0003b | 0003b370:·3830·2220·7461·6269·6e64·6578·3d22·3022··80"·tabindex="0" | ||
| 0003b | 0003b380:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b390:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003b3a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b3b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b3c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b3d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b3e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b3f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b400:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b410:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 31608767/31637361 bytes (99.91%) of diff not shown. | |||
| Offset 15092, 133 lines modified | Offset 15092, 133 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003afb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afe0:·6170·7365·2220·6964·3d22·6964·6d31·3038··apse"·id="idm108 | |||
| 0003aff0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b000:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b010:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b020:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b030:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b040:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b050:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b060:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d31·3038·3922·3e3c·7072··id="idm1089"><pr | |||
| 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b080:·6574·3d22·2369·646d·3130·3930·2220·7461··et="#idm1090"·ta | |||
| 0003b090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b0f0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b130:·643d·2269·646d·3130·3930·223e·3c74·6162··d="idm1090"><tab | |||
| 0003b140:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b150:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b160:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b170:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b180:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b070:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b1a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b1e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b080:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b200:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b210:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b220:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b230:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b240:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b250:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b260:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b270:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b280:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b290:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b2a0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b2b0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b2c0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b2d0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b2e0:·2d74·6172·6765·743d·2223·6964·6d31·3039··-target="#idm109 | |||
| 0003b2f0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b300:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b310:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b320:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b330:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b340:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b | 0003b090:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b0a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b0f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b100:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b110:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b120:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b130:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b140:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b150:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b160:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b170:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b180:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b190:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b200:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b210:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b220:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b230:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b240:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b250:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b260:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b270:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b280:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b290:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b2a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b2b0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b2c0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b2d0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b2e0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b2f0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b300:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b310:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b320:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b330:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b340:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b350:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b360:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b370:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b380:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| Max diff block lines reached; 2773296/2790298 bytes (99.39%) of diff not shown. | |||
| Offset 120, 31 lines modified | Offset 120, 14 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Gather·the·package·facts | 132 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 133 | ··package_facts: |
| Offset 173, 14 lines modified | Offset 156, 31 lines modified | ||
| 173 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 174 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 175 | ··-·low_complexity | 158 | ··-·low_complexity |
| 176 | ··-·low_disruption | 159 | ··-·low_disruption |
| 177 | ··-·medium_severity | 160 | ··-·medium_severity |
| 178 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 179 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 179 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 182 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 180 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 183 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 181 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 184 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 182 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 185 | crontab: | 183 | crontab: |
| 186 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 184 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 393, 33 lines modified | Offset 393, 14 lines modified | ||
| 393 | ············_\x8i_\x8s_\x8m······1446 | 393 | ············_\x8i_\x8s_\x8m······1446 |
| 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 397 | ·····················FCS_TLSC_EXT.1 | 397 | ·····················FCS_TLSC_EXT.1 |
| 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | var_system_crypto_policy='DEFAULT' | ||
| 402 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 403 | rc=$? | ||
| 404 | if·test·"$rc"·=·127;·then | ||
| 405 | » echo·"$stderr_of_call"·>&2 | ||
| 406 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 407 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 408 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 409 | » false··#·end·with·an·error·code | ||
| 410 | elif·test·"$rc"·!=·0;·then | ||
| 411 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 412 | » false··#·end·with·an·error·code | ||
| 413 | fi | ||
| 414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 419 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 405 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 420 | ··set_fact: | 406 | ··set_fact: |
| Offset 464, 14 lines modified | Offset 445, 33 lines modified | ||
| 464 | ··-·PCI-DSSv4-2.2.7 | 445 | ··-·PCI-DSSv4-2.2.7 |
| 465 | ··-·configure_crypto_policy | 446 | ··-·configure_crypto_policy |
| 466 | ··-·high_severity | 447 | ··-·high_severity |
| 467 | ··-·low_complexity | 448 | ··-·low_complexity |
| 468 | ··-·low_disruption | 449 | ··-·low_disruption |
| 469 | ··-·no_reboot_needed | 450 | ··-·no_reboot_needed |
| 470 | ··-·restrict_strategy | 451 | ··-·restrict_strategy |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | var_system_crypto_policy='DEFAULT' | ||
| 454 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 455 | rc=$? | ||
| 456 | if·test·"$rc"·=·127;·then | ||
| 457 | » echo·"$stderr_of_call"·>&2 | ||
| 458 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 459 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 460 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 461 | » false··#·end·with·an·error·code | ||
| 462 | elif·test·"$rc"·!=·0;·then | ||
| 463 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 464 | » false··#·end·with·an·error·code | ||
| 465 | fi | ||
| 471 | Group ·Updating·Software· Group·contains·1·rule | 466 | Group ·Updating·Software· Group·contains·1·rule |
| 472 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 467 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 473 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 468 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 316587/321770 bytes (98.39%) of diff not shown. | |||
| Offset 15087, 133 lines modified | Offset 15087, 133 lines modified | ||
| 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | ||
| 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af50:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af90:·7073·6522·2069·643d·2269·646d·3130·3839··pse"·id="idm1089 | |||
| 0003afa0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003afb0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afc0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afd0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afe0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003aff0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b000:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b010:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af50:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003af60:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afa0:·643d·2269·646d·3130·3839·223e·3c70·7265··d="idm1089"><pre | |||
| 0003afb0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afc0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afd0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003afe0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003aff0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b000:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b010:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b020:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b030:·743d·2223·6964·6d31·3039·3022·2074·6162··t="#idm1090"·tab | |||
| 0003b040:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b050:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b060:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b070:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b080:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b090:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b0a0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b0b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b0d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b0e0:·3d22·6964·6d31·3039·3022·3e3c·7461·626c··="idm1090"><tabl | |||
| 0003b0f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b100:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b110:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b120:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b130:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b020:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b030:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b040:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b050:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b060:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b070:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b080:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b090:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b0a0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b0b0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b0c0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b0d0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b0e0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0f0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b100:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b110:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b120:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b130:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b140:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b150:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b160:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b170:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b180:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b190:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b1a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b1b0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b1c0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b1d0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b1e0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b1f0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b200:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b210:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b220:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b230:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b240:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b250:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b260:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b270:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b280:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b290:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b2a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b2b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b2c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b2d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b2e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b2f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b300:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b310:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b320:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b330:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b340:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b350:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b360:·2369·646d·3130·3930·2220·7461·6269·6e64··#idm1090"·tabind | |||
| 0003b370:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b380:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b390:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b3a0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b3b0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b3c0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b3d0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b3e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b3f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b400:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b410:·6170·7365·2220·6964·3d22·6964·6d31·3039··apse"·id="idm109 | |||
| 0003b420:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b430:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b440:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b450:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b460:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b470:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b480:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b490:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4a0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 0003b4b0:·3931·2220·7461·6269·6e64·6578·3d22·3022··91"·tabindex="0" | |||
| 0003b4c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b4d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| Max diff block lines reached; 2715349/2732351 bytes (99.38%) of diff not shown. | |||
| Offset 118, 31 lines modified | Offset 118, 14 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 131 | ··package_facts: |
| Offset 171, 14 lines modified | Offset 154, 31 lines modified | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 172 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 173 | ··-·low_complexity | 156 | ··-·low_complexity |
| 174 | ··-·low_disruption | 157 | ··-·low_disruption |
| 175 | ··-·medium_severity | 158 | ··-·medium_severity |
| 176 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 177 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 177 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 180 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 178 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 181 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 179 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 182 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 180 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 183 | crontab: | 181 | crontab: |
| 184 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 182 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 549, 20 lines modified | Offset 549, 14 lines modified | ||
| 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 552 | ···········standards,·and·guidance. | 552 | ···········standards,·and·guidance. |
| 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 554 | Severity: ·medium | 554 | Severity: ·medium |
| 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 561 | chgrp·0·/etc/issue | ||
| 562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 567 | -·name:·Test·for·existence·/etc/issue | 561 | -·name:·Test·for·existence·/etc/issue |
| 568 | ··stat: | 562 | ··stat: |
| Offset 584, 30 lines modified | Offset 578, 30 lines modified | ||
| 584 | ··tags: | 578 | ··tags: |
| 585 | ··-·configure_strategy | 579 | ··-·configure_strategy |
| 586 | ··-·file_groupowner_etc_issue | 580 | ··-·file_groupowner_etc_issue |
| 587 | ··-·low_complexity | 581 | ··-·low_complexity |
| 588 | ··-·low_disruption | 582 | ··-·low_disruption |
| 589 | ··-·medium_severity | 583 | ··-·medium_severity |
| 590 | ··-·no_reboot_needed | 584 | ··-·no_reboot_needed |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 590 | chgrp·0·/etc/issue | ||
| 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 593 | $·sudo·chgrp·root·/etc/motd | 593 | $·sudo·chgrp·root·/etc/motd |
| 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 597 | ···········standards,·and·guidance. | 597 | ···········standards,·and·guidance. |
| 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 599 | Severity: ·medium | 599 | Severity: ·medium |
| 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd | 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd |
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 606 | chgrp·0·/etc/motd | ||
| 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 612 | -·name:·Test·for·existence·/etc/motd | 606 | -·name:·Test·for·existence·/etc/motd |
| 613 | ··stat: | 607 | ··stat: |
| Offset 629, 30 lines modified | Offset 623, 30 lines modified | ||
| 629 | ··tags: | 623 | ··tags: |
| 630 | ··-·configure_strategy | 624 | ··-·configure_strategy |
| 631 | ··-·file_groupowner_etc_motd | 625 | ··-·file_groupowner_etc_motd |
| 632 | ··-·low_complexity | 626 | ··-·low_complexity |
| 633 | ··-·low_disruption | 627 | ··-·low_disruption |
| Max diff block lines reached; 309181/314645 bytes (98.26%) of diff not shown. | |||
| Offset 15112, 134 lines modified | Offset 15112, 134 lines modified | ||
| 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | ||
| 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b0f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b100:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b110:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b120:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b130:·2269·646d·3131·3439·223e·3c74·6162·6c65··"idm1149"><table | |||
| 0003b140:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b150:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b160:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b170:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b180:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b190:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b1b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b100:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b110:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b120:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b130:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 0003b140:·3439·223e·3c70·7265·3e3c·636f·6465·3e0a··49"><pre><code>. | |||
| 0003b150:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b160:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b170:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b180:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b190:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b1a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b1b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b1c0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003b1d0:·3135·3022·2074·6162·696e·6465·783d·2230··150"·tabindex="0 | |||
| 0003b1e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b1f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b200:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b210:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b220:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b230:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b240:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b250:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b260:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b270:·6170·7365·2220·6964·3d22·6964·6d31·3135··apse"·id="idm115 | |||
| 0003b280:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b290:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b2a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b2c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b1c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b2f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b1d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b1e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b200:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b330:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b340:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b350:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b360:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b370:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b380:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b | 0003b210:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b220:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b230:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b240:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b250:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b260:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b270:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b280:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b290:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2a0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2b0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2c0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2d0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2e0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b2f0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b300:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b310:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b320:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b330:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b340:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b350:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b360:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b3 | 0003b370:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 0003b3b0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b3c0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b3 | 0003b380:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | ||
| 0003b390:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b3a0:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b3b0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b3c0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b3d0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b3e0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b3f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b400:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b410:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b420:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b430:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b440:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b450:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b460:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b470:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b480:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b490:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b4a0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b4b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b4c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b4d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b4e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b4f0:·7461·7267·6574·3d22·2369·646d·3131·3530··target="#idm1150 | |||
| 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b560:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b570:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b580:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b590:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5b0:·3d22·6964·6d31·3135·3022·3e3c·7072·653e··="idm1150"><pre> | |||
| 0003b5c0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b5d0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| Max diff block lines reached; 3473343/3490483 bytes (99.51%) of diff not shown. | |||
| Offset 122, 31 lines modified | Offset 122, 14 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 150 | ··package_facts: | 135 | ··package_facts: |
| Offset 175, 14 lines modified | Offset 158, 31 lines modified | ||
| 175 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 176 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 177 | ··-·low_complexity | 160 | ··-·low_complexity |
| 178 | ··-·low_disruption | 161 | ··-·low_disruption |
| 179 | ··-·medium_severity | 162 | ··-·medium_severity |
| 180 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 181 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of |
| 187 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance | 185 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance |
| 188 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 353, 33 lines modified | Offset 353, 14 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 380 | ··set_fact: | 366 | ··set_fact: |
| Offset 424, 14 lines modified | Offset 405, 33 lines modified | ||
| 424 | ··-·PCI-DSSv4-2.2.7 | 405 | ··-·PCI-DSSv4-2.2.7 |
| 425 | ··-·configure_crypto_policy | 406 | ··-·configure_crypto_policy |
| 426 | ··-·high_severity | 407 | ··-·high_severity |
| 427 | ··-·low_complexity | 408 | ··-·low_complexity |
| 428 | ··-·low_disruption | 409 | ··-·low_disruption |
| 429 | ··-·no_reboot_needed | 410 | ··-·no_reboot_needed |
| 430 | ··-·restrict_strategy | 411 | ··-·restrict_strategy |
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 413 | var_system_crypto_policy='DEFAULT' | ||
| 414 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 415 | rc=$? | ||
| 416 | if·test·"$rc"·=·127;·then | ||
| 417 | » echo·"$stderr_of_call"·>&2 | ||
| 418 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 419 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 420 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 421 | » false··#·end·with·an·error·code | ||
| 422 | elif·test·"$rc"·!=·0;·then | ||
| 423 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 424 | » false··#·end·with·an·error·code | ||
| 425 | fi | ||
| 431 | Group ·Sudo· Group·contains·1·rule | 426 | Group ·Sudo· Group·contains·1·rule |
| 432 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 427 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 433 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 428 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| Max diff block lines reached; 407290/412545 bytes (98.73%) of diff not shown. | |||
| Offset 14931, 117 lines modified | Offset 14931, 117 lines modified | ||
| 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | ||
| 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003a590:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003a5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a5b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003a590:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003a5a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a5b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a5c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a5d0:·2269·646d·3636·3234·223e·3c74·6162·6c65··"idm6624"><table | |||
| 0003a5e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a5f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a600:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a610:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a620:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a630:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a640:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a650:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a660:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a670:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a680:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a690:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a6a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003a6b0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003a6c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a6d0:·636f·6465·3e63·6867·7270·2030·202f·6574··code>chgrp·0·/et | |||
| 0003a6e0:·632f·7061·7373·7764·0a3c·2f63·6f64·653e··c/passwd.</code> | |||
| 0003a6f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a700:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a710:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a | 0003a5c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003a5d0:·6964·3d22·6964·6d36·3632·3422·3e3c·7461··id="idm6624"><ta | |||
| 0003a5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a730:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003a740:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | |||
| 0003a750:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a760:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a770:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a780:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a790:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a7a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a7b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a7c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a7d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a7e0:·6c61·7073·6522·2069·643d·2269·646d·3636··lapse"·id="idm66 | |||
| 0003a7f0:·3235·223e·3c74·6162·6c65·2063·6c61·7373··25"><table·class | |||
| 0003a800:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a810:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a820:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a830:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a840:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a850:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a860:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003a | 0003a630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003a | 0003a640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a650:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a660:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a670:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a680:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a6a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a6b0:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0003a6c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a6d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a6e0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | |||
| 0003a890:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003a8a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a8b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a8c0:·3c2f·7468·3e3c·7464·3e63·6f6e·6669·6775··</th><td>configu | |||
| 0003a8d0:·7265·3c2f·7464·3e3c·2f74·723e·3c2f·7461··re</td></tr></ta | |||
| 0003a8e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003a8f0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | |||
| 0003a900:·6578·6973·7465·6e63·6520·2f65·7463·2f70··existence·/etc/p | |||
| 0003a910:·6173·7377·640a·2020·7374·6174·3a0a·2020··asswd.··stat:.·· | |||
| 0003a920:·2020·7061·7468·3a20·2f65·7463·2f70·6173····path:·/etc/pas | |||
| 0003a930:·7377·640a·2020·7265·6769·7374·6572·3a20··swd.··register:· | |||
| 0003a940:·6669·6c65·5f65·7869·7374·730a·2020·7461··file_exists.··ta | |||
| 0003a950:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | |||
| 0003a960:·2e32·2e32·0a20·202d·204e·4953·542d·3830··.2.2.··-·NIST-80 | |||
| 0003a970:·302d·3533·2d41·432d·3628·3129·0a20·202d··0-53-AC-6(1).··- | |||
| 0003a980:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003a990:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003a9a0:·2d52·6571·2d38·2e37·2e63·0a20·202d·2050··-Req-8.7.c.··-·P | |||
| 0003a9b0:·4349·2d44·5353·7634·2d32·2e32·0a20·202d··CI-DSSv4-2.2.··- | |||
| 0003a9c0:·2050·4349·2d44·5353·7634·2d32·2e32·2e36···PCI-DSSv4-2.2.6 | |||
| 0003a9d0:·0a20·202d·2063·6f6e·6669·6775·7265·5f73··.··-·configure_s | |||
| 0003a9e0:·7472·6174·6567·790a·2020·2d20·6669·6c65··trategy.··-·file | |||
| 0003a9f0:·5f67·726f·7570·6f77·6e65·725f·6574·635f··_groupowner_etc_ | |||
| 0003aa00:·7061·7373·7764·0a20·202d·206c·6f77·5f63··passwd.··-·low_c | |||
| 0003aa10:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003aa20:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003aa30:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003aa40:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003aa50:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | |||
| 0003aa60:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | |||
| 0003aa70:·7220·3020·6f6e·202f·6574·632f·7061·7373··r·0·on·/etc/pass | |||
| 0003aa80:·7764·0a20·2066·696c·653a·0a20·2020·2070··wd.··file:.····p | |||
| 0003a | 0003a6f0:·6365·202f·6574·632f·7061·7373·7764·0a20··ce·/etc/passwd.· | ||
| 0003a700:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | |||
| 0003aaa0:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | |||
| 0003aab0:·2020·7768·656e·3a20·6669·6c65·5f65·7869····when:·file_exi | |||
| 0003aac0:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | |||
| 0003aad0:·6e65·6420·616e·6420·6669·6c65·5f65·7869··ned·and·file_exi | |||
| 0003aae0:·7374·732e·7374·6174·2e65·7869·7374·730a··sts.stat.exists. | |||
| 0003aaf0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003ab00:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | |||
| 0003ab10:·542d·3830·302d·3533·2d41·432d·3628·3129··T-800-53-AC-6(1) | |||
| 0003ab20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ab30:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003ab40:·2d44·5353·2d52·6571·2d38·2e37·2e63·0a20··-DSS-Req-8.7.c.· | |||
| 0003ab50:·202d·2050·4349·2d44·5353·7634·2d32·2e32···-·PCI-DSSv4-2.2 | |||
| 0003ab60:·0a20·202d·2050·4349·2d44·5353·7634·2d32··.··-·PCI-DSSv4-2 | |||
| 0003ab70:·2e32·2e36·0a20·202d·2063·6f6e·6669·6775··.2.6.··-·configu | |||
| 0003ab80:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003ab90:·6669·6c65·5f67·726f·7570·6f77·6e65·725f··file_groupowner_ | |||
| 0003a | 0003a710:·202f·6574·632f·7061·7373·7764·0a20·2072···/etc/passwd.··r | ||
| 0003abb0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003abc0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| Max diff block lines reached; 31106/45900 bytes (67.77%) of diff not shown. | |||
| Offset 107, 20 lines modified | Offset 107, 14 lines modified | ||
| 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 119 | chgrp·0·/etc/passwd | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 125 | -·name:·Test·for·existence·/etc/passwd | 119 | -·name:·Test·for·existence·/etc/passwd |
| 126 | ··stat: | 120 | ··stat: |
| Offset 154, 14 lines modified | Offset 148, 20 lines modified | ||
| 154 | ··-·PCI-DSSv4-2.2.6 | 148 | ··-·PCI-DSSv4-2.2.6 |
| 155 | ··-·configure_strategy | 149 | ··-·configure_strategy |
| 156 | ··-·file_groupowner_etc_passwd | 150 | ··-·file_groupowner_etc_passwd |
| 157 | ··-·low_complexity | 151 | ··-·low_complexity |
| 158 | ··-·low_disruption | 152 | ··-·low_disruption |
| 159 | ··-·medium_severity | 153 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 160 | chgrp·0·/etc/passwd | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 163 | $·sudo·chown·root·/etc/passwd | 163 | $·sudo·chown·root·/etc/passwd |
| 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are | 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for | 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 166 | ············system·security. | 166 | ············system·security. |
| 167 | Severity: ··medium | 167 | Severity: ··medium |
| Offset 182, 20 lines modified | Offset 182, 14 lines modified | ||
| 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 194 | chown·0·/etc/passwd | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 200 | -·name:·Test·for·existence·/etc/passwd | 194 | -·name:·Test·for·existence·/etc/passwd |
| 201 | ··stat: | 195 | ··stat: |
| Offset 229, 14 lines modified | Offset 223, 20 lines modified | ||
| 229 | ··-·PCI-DSSv4-2.2.6 | 223 | ··-·PCI-DSSv4-2.2.6 |
| 230 | ··-·configure_strategy | 224 | ··-·configure_strategy |
| 231 | ··-·file_owner_etc_passwd | 225 | ··-·file_owner_etc_passwd |
| 232 | ··-·low_complexity | 226 | ··-·low_complexity |
| 233 | ··-·low_disruption | 227 | ··-·low_disruption |
| 234 | ··-·medium_severity | 228 | ··-·medium_severity |
| 235 | ··-·no_reboot_needed | 229 | ··-·no_reboot_needed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 235 | chown·0·/etc/passwd | ||
| 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 238 | $·sudo·chmod·0644·/etc/passwd | 238 | $·sudo·chmod·0644·/etc/passwd |
| 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list | 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list |
| 241 | ············of·accounts·on·the·system·and·associated·information,·and | 241 | ············of·accounts·on·the·system·and·associated·information,·and |
| 242 | ············protection·of·this·file·is·critical·for·system·security. | 242 | ············protection·of·this·file·is·critical·for·system·security. |
| Offset 258, 24 lines modified | Offset 258, 14 lines modified | ||
| 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 270 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 276 | -·name:·Test·for·existence·/etc/passwd | 270 | -·name:·Test·for·existence·/etc/passwd |
| 277 | ··stat: | 271 | ··stat: |
| Offset 309, 11 lines modified | Offset 299, 21 lines modified | ||
| 309 | ··-·PCI-DSSv4-2.2.6 | 299 | ··-·PCI-DSSv4-2.2.6 |
| 310 | ··-·configure_strategy | 300 | ··-·configure_strategy |
| 311 | ··-·file_permissions_etc_passwd | 301 | ··-·file_permissions_etc_passwd |
| 312 | ··-·low_complexity | 302 | ··-·low_complexity |
| 313 | ··-·low_disruption | 303 | ··-·low_disruption |
| 314 | ··-·medium_severity | 304 | ··-·medium_severity |
| 315 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 311 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 316 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 312 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5541 bytes (2.27%) of diff not shown. | |||
| Offset 19069, 66 lines modified | Offset 19069, 66 lines modified | ||
| 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | ||
| 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a830:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0004a830:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a840:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a8 | 0004a840:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004a8 | 0004a850:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004a8 | 0004a860:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004a8 | 0004a870:·646d·3736·3334·223e·3c74·6162·6c65·2063··dm7634"><table·c | ||
| 0004a8 | 0004a880:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004a8 | 0004a890:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004a8 | 0004a8a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004a8 | 0004a8b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004a8 | 0004a8c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004a8d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a8e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a8f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a | 0004a900:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0004a8f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a900:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a910:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a9 | 0004a910:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0004a9 | 0004a920:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0004a9 | 0004a930:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004a9 | 0004a940:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0004a9 | 0004a950:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0004a9 | 0004a960:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0004a9 | 0004a970:·6465·3e61·7069·5665·7273·696f·6e3a·206d··de>apiVersion:·m | ||
| 0004a9 | 0004a980:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | ||
| 0004a9 | 0004a990:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | ||
| 0004a9 | 0004a9a0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | ||
| 0004a9 | 0004a9b0:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | ||
| 0004a9 | 0004a9c0:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | ||
| 0004a9 | 0004a9d0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | ||
| 0004a9 | 0004a9e0:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | ||
| 0004a | 0004a9f0:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | ||
| 0004aa00:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004aa10:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004aa20:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004aa30:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004aa40:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004aa | 0004aa50:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004aa | 0004aa60:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | ||
| 0004aa30:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004aa40:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004aa50:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004aa60:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004aa70:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004aa | 0004aa70:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | ||
| 0004aa | 0004aa80:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | ||
| 0004aa | 0004aa90:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0004aa | 0004aaa0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0004aa | 0004aab0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0004aa | 0004aac0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0004aa | 0004aad0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0004aa | 0004aae0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a | 0004aaf0:·646d·3736·3335·2220·7461·6269·6e64·6578··dm7635"·tabindex | ||
| 0004ab | 0004ab00:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004ab20 | 0004ab10:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004ab | 0004ab20:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004ab | 0004ab30:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ab | 0004ab40:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ab | 0004ab50:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | ||
| 0004ab60:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | ||
| 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | ||
| 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00087b40:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 00087b50:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 00087b60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00087b70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00087b80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00087b90:·2269·646d·3138·3339·3322·3e3c·7461·626c··"idm18393"><tabl | |||
| 00087ba0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00087bb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00087bc0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00087bd0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00087be0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00087bf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00087c00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00087c10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00087c20:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 00087c30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00087c40:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 00087c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00087c60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00087c70:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 00087c80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00087c90:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | |||
| 00087ca0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 00087cb0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 00087cc0:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 00087cd0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 00087ce0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 00087cf0:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 00087d00:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 00087d10:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 00087d20:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 00087d30:·6e61·6d65·3a20·626c·7565·746f·6f74·682e··name:·bluetooth. | |||
| 00087d40:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00087d50:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087d60:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087d70:·650a·2020·2020·2020·2d20·6e61·6d65·3a20··e.······-·name:· | |||
| 00087d80:·626c·7565·746f·6f74·682e·736f·636b·6574··bluetooth.socket | |||
| 00087d90:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 00087da0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 00087db0:·6d61·736b·3a20·7472·7565·0a3c·2f63·6f64··mask:·true.</cod | |||
| 00087dc0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00087dd0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00087de0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 16750/32672 bytes (51.27%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19068, 67 lines modified | Offset 19068, 67 lines modified | ||
| 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | ||
| 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a820:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a820:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0004a830:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a8 | 0004a830:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0004a8 | 0004a840:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0004a8 | 0004a850:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0004a870 | 0004a860:·7073·6522·2069·643d·2269·646d·3736·3334··pse"·id="idm7634 | ||
| 0004a8 | 0004a870:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004a8 | 0004a880:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004a8 | 0004a890:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004a8 | 0004a8a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004a8 | 0004a8b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004a8 | 0004a8c0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004a8d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a8e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a8f0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a | 0004a900:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a8f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a900:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a910:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a9 | 0004a910:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a9 | 0004a920:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0004a9 | 0004a930:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0004a9 | 0004a940:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0004a9 | 0004a950:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a9 | 0004a960:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0004a9 | 0004a970:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0004a9 | 0004a980:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0004a9 | 0004a990:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0004a9 | 0004a9a0:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0004a9 | 0004a9b0:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0004a9 | 0004a9c0:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0004a9 | 0004a9d0:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0004a9 | 0004a9e0:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0004aa00 | 0004a9f0:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0004aa00:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004aa10:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004aa20:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004aa30:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004aa40:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa | 0004aa50:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004aa | 0004aa60:·6865·6c6c·2e73·6f63·6b65·740a·2020·2020··hell.socket.···· | ||
| 0004aa | 0004aa70:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | ||
| 0004aa | 0004aa80:·7365·0a20·2020·2020·2020·206d·6173·6b3a··se.········mask: | ||
| 0004aa50:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004aa60:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004aa70:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004aa80:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004aa90:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004aa | 0004aa90:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | ||
| 0004aa | 0004aaa0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0004aa | 0004aab0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0004aa | 0004aac0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0004aa | 0004aad0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0004aa | 0004aae0:·7461·7267·6574·3d22·2369·646d·3736·3335··target="#idm7635 | ||
| 0004a | 0004aaf0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004ab | 0004ab00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004ab | 0004ab10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004ab | 0004ab20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004ab40 | 0004ab30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004ab | 0004ab40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004ab50:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004ab60:· | 0004ab60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | ||
| 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3339·3322·3e3c·7461·626c·6520·636c·6173··393"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00087cf0:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| 00087d00:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | |||
| 00087d10:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | |||
| 00087d20:·3a0a·2020·2020·2020·2d20·6e61·6d65·3a20··:.······-·name:· | |||
| 00087d30:·626c·7565·746f·6f74·682e·7365·7276·6963··bluetooth.servic | |||
| 00087d40:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 00087d50:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 00087d60:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 00087d70:·2020·2d20·6e61·6d65·3a20·626c·7565·746f····-·name:·blueto | |||
| 00087d80:·6f74·682e·736f·636b·6574·0a20·2020·2020··oth.socket.····· | |||
| 00087d90:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 00087da0:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 00087db0:·7472·7565·0a3c·2f63·6f64·653e·3c2f·7072··true.</code></pr | |||
| 00087dc0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00087dd0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00087de0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| Max diff block lines reached; 16612/32672 bytes (50.84%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | ||
| 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004a840:·6469·6174·696f·6e20· | 0004a840:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | ||
| 0004a850:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004a8 | 0004a850:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0004a8 | 0004a860:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0004a8 | 0004a870:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0004a8 | 0004a880:·643d·2269·646d·3736·3334·223e·3c74·6162··d="idm7634"><tab | ||
| 0004a8 | 0004a890:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0004a8 | 0004a8a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0004a8 | 0004a8b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0004a8 | 0004a8c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0004a8 | 0004a8d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0004a8 | 0004a8e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0004a900:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a910:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a920:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0004a930:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004a940:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0004a | 0004a8f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0004a900:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004a910:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0004a920:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004a930:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0004a940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a950:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0004a9 | 0004a960:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | ||
| 0004a9 | 0004a970:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0004a9 | 0004a980:·3e3c·636f·6465·3e61·7069·5665·7273·696f··><code>apiVersio | ||
| 0004a9a0 | 0004a990:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | ||
| 0004a9 | 0004a9a0:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | ||
| 0004a9 | 0004a9b0:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | ||
| 0004a9 | 0004a9c0:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | ||
| 0004a9 | 0004a9d0:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | ||
| 0004a9 | 0004a9e0:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | ||
| 0004a | 0004a9f0:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | ||
| 0004aa | 0004aa00:·2020·2073·7973·7465·6d64·3a0a·2020·2020·····systemd:.···· | ||
| 0004aa10:·2020·756e·6974·733a·0a20·2020·2020·202d····units:.······- | |||
| 0004aa20:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004aa30:·6c6c·2e73·6572·7669·6365·0a20·2020·2020··ll.service.····· | |||
| 0004aa40:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 0004aa50:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 0004aa | 0004aa60:·7472·7565·0a20·2020·2020·202d·206e·616d··true.······-·nam | ||
| 0004aa | 0004aa70:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | ||
| 0004aa40:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004aa50:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004aa60:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004aa70:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004aa80:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | |||
| 0004aa | 0004aa80:·6f63·6b65·740a·2020·2020·2020·2020·656e··ocket.········en | ||
| 0004aa | 0004aa90:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | ||
| 0004aa | 0004aaa0:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | ||
| 0004aa | 0004aab0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0004aa | 0004aac0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0004aa | 0004aad0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0004aa | 0004aae0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0004a | 0004aaf0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004ab | 0004ab00:·3d22·2369·646d·3736·3335·2220·7461·6269··="#idm7635"·tabi | ||
| 0004ab | 0004ab10:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004ab | 0004ab20:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004ab | 0004ab30:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004ab | 0004ab40:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004ab | 0004ab50:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004ab | 0004ab60:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0004ab70:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | ||
| 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| Offset 34735, 67 lines modified | Offset 34735, 67 lines modified | ||
| 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | ||
| 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b50:·223e·5265·6d65·6469·6174·696f·6e20· | 00087b50:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 00087b60:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b70 | 00087b60:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 00087b | 00087b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00087b | 00087b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00087b | 00087b90:·7073·6522·2069·643d·2269·646d·3138·3339··pse"·id="idm1839 | ||
| 00087b | 00087ba0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 00087b | 00087bb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 00087b | 00087bc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 00087b | 00087bd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 00087b | 00087be0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 00087 | 00087bf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c | 00087c30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00087c20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c30:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c | 00087c40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 00087c | 00087c50:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | ||
| 00087c | 00087c60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00087c | 00087c70:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | ||
| 00087c | 00087c80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 00087c | 00087c90:·6c65·3e3c·7072·653e·3c63·6f64·653e·6170··le><pre><code>ap | ||
| 00087c | 00087ca0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | ||
| 00087c | 00087cb0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | ||
| 00087c | 00087cc0:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | ||
| 00087c | 00087cd0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | ||
| 00087c | 00087ce0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | ||
| 00087 | 00087cf0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | ||
| 00087d | 00087d00:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | ||
| 00087d | 00087d10:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | ||
| 00087d30 | 00087d20:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | ||
| 00087d30:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d40:·7565·746f·6f74·682e·7365·7276·6963·650a··uetooth.service. | |||
| 00087d50:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 00087d60:·2066·616c·7365·0a20·2020·2020·2020·206d···false.········m | |||
| 00087d70:·6173·6b3a·2074·7275·650a·2020·2020·2020··ask:·true.······ | |||
| 00087d | 00087d80:·2d20·6e61·6d65·3a20·626c·7565·746f·6f74··-·name:·bluetoot | ||
| 00087d50:·6f74·682e·7365·7276·6963·650a·2020·2020··oth.service.···· | |||
| 00087d60:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | ||
| 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004a840:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0004a840:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 0004a850:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004a8 | 0004a850:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0004a870 | 0004a860:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0004a8 | 0004a870:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0004a8 | 0004a880:·3736·3334·223e·3c74·6162·6c65·2063·6c61··7634"><table·cla | ||
| 0004a8 | 0004a890:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0004a8 | 0004a8a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0004a8 | 0004a8b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0004a8 | 0004a8c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0004a8 | 0004a8d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0004a8e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004a8f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004a900:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0004a | 0004a910:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0004a900:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a910:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a920:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0004a9 | 0004a930:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0004a9 | 0004a940:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0004a9 | 0004a950:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | ||
| 0004a9 | 0004a960:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0004a9 | 0004a970:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0004a9 | 0004a980:·3e61·7069·5665·7273·696f·6e3a·206d·6163··>apiVersion:·mac | ||
| 0004a9 | 0004a990:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | ||
| 0004a9 | 0004a9a0:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | ||
| 0004a9 | 0004a9b0:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | ||
| 0004a9 | 0004a9c0:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | ||
| 0004a9 | 0004a9d0:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | ||
| 0004a9f0 | 0004a9e0:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | ||
| 0004aa0 | 0004a9f0:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | ||
| 0004aa | 0004aa00:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | ||
| 0004aa10:·733a·0a20·2020·2020·202d·206e·616d·653a··s:.······-·name: | |||
| 0004aa20:·2064·6562·7567·2d73·6865·6c6c·2e73·6572···debug-shell.ser | |||
| 0004aa30:·7669·6365·0a20·2020·2020·2020·2065·6e61··vice.········ena | |||
| 0004aa40:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0004aa50:·2020·2020·6d61·736b·3a20·7472·7565·0a20······mask:·true.· | |||
| 0004aa | 0004aa60:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | ||
| 0004aa30:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004aa40:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004aa50:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004aa60:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa70:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004aa | 0004aa70:·7567·2d73·6865·6c6c·2e73·6f63·6b65·740a··ug-shell.socket. | ||
| 0004aa | 0004aa80:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | ||
| 0004aa | 0004aa90:·2066·616c·7365·0a20·2020·2020·2020·206d···false.········m | ||
| 0004aa | 0004aaa0:·6173·6b3a·2074·7275·650a·3c2f·636f·6465··ask:·true.</code | ||
| 0004aa | 0004aab0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0004aa | 0004aac0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0004aa | 0004aad0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0004aa | 0004aae0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0004a | 0004aaf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0004ab | 0004ab00:·3736·3335·2220·7461·6269·6e64·6578·3d22··7635"·tabindex=" | ||
| 0004ab20 | 0004ab10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004ab | 0004ab20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004ab | 0004ab30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004ab | 0004ab40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004ab | 0004ab50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004ab | 0004ab60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | ||
| 0004ab70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | ||
| 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3339·3322·3e3c·7461·626c·6520··dm18393"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00087cf0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 00087d00:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 00087d10:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 00087d20:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 00087d30:·6e69·7473·3a0a·2020·2020·2020·2d20·6e61··nits:.······-·na | |||
| 00087d40:·6d65·3a20·626c·7565·746f·6f74·682e·7365··me:·bluetooth.se | |||
| 00087d50:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | |||
| 00087d60:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 00087d70:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 00087d80:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d90:·7565·746f·6f74·682e·736f·636b·6574·0a20··uetooth.socket.· | |||
| 00087da0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087db0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087dc0:·736b·3a20·7472·7565·0a3c·2f63·6f64·653e··sk:·true.</code> | |||
| 00087dd0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00087de0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00087df0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| Max diff block lines reached; 8444/24366 bytes (34.65%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19028, 67 lines modified | Offset 19028, 67 lines modified | ||
| 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | ||
| 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004a5a0:·656d·6564·6961·7469·6f6e·20 | 0004a5a0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| 0004a5b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0004a5 | 0004a5b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0004a5 | 0004a5c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0004a5 | 0004a5d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0004a5 | 0004a5e0:·2220·6964·3d22·6964·6d37·3633·3422·3e3c··"·id="idm7634">< | ||
| 0004a | 0004a5f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0004a6 | 0004a600:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0004a620 | 0004a610:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0004a6 | 0004a620:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0004a6 | 0004a630:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0004a6 | 0004a640:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0004a650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004a660:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004a670:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0004a6 | 0004a680:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0004a670:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a680:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a690:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a6 | 0004a690:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | ||
| 0004a6 | 0004a6a0:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | ||
| 0004a6 | 0004a6b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0004a6 | 0004a6c0:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | ||
| 0004a6 | 0004a6d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0004a6 | 0004a6e0:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | ||
| 0004a | 0004a6f0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | ||
| 0004a7 | 0004a700:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | ||
| 0004a7 | 0004a710:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | ||
| 0004a7 | 0004a720:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | ||
| 0004a7 | 0004a730:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | ||
| 0004a7 | 0004a740:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | ||
| 0004a7 | 0004a750:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | ||
| 0004a7 | 0004a760:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | ||
| 0004a7 | 0004a770:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | ||
| 0004a780:·2020·2d20·6e61·6d65·3a20·6465·6275·672d····-·name:·debug- | |||
| 0004a790:·7368·656c·6c2e·7365·7276·6963·650a·2020··shell.service.·· | |||
| 0004a7a0:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | |||
| 0004a7b0:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | |||
| 0004a7c0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0004a7 | 0004a7d0:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | ||
| 0004a7 | 0004a7e0:·6c2e·736f·636b·6574·0a20·2020·2020·2020··l.socket.······· | ||
| 0004a7b0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a7c0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a7d0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0004a7e0:·3a20·6465·6275·672d·7368·656c·6c2e·736f··:·debug-shell.so | |||
| 0004a7f0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0004a | 0004a7f0:·2065·6e61·626c·6564·3a20·6661·6c73·650a···enabled:·false. | ||
| 0004a8 | 0004a800:·2020·2020·2020·2020·6d61·736b·3a20·7472··········mask:·tr | ||
| 0004a8 | 0004a810:·7565·0a3c·2f63·6f64·653e·3c2f·7072·653e··ue.</code></pre> | ||
| 0004a8 | 0004a820:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0004a8 | 0004a830:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0004a8 | 0004a840:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0004a8 | 0004a850:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0004a8 | 0004a860:·6765·743d·2223·6964·6d37·3633·3522·2074··get="#idm7635"·t | ||
| 0004a8 | 0004a870:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0004a8 | 0004a880:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0004a8 | 0004a890:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0004a8 | 0004a8a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0004a8 | 0004a8b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0004a8 | 0004a8c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0004a8d0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0004a8e0:· | 0004a8e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | ||
| 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| Offset 34694, 66 lines modified | Offset 34694, 66 lines modified | ||
| 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | ||
| 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000878c0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 000878d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000878e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000878f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00087900:·7365·2220·6964·3d22·6964·6d31·3833·3933··se"·id="idm18393 | |||
| 00087910:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00087920:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00087930:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00087940:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00087950:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00087960:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00087970:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00087980:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00087990:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 000879a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000879c0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | |||
| 000879d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000879e0:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | |||
| 000879f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00087a00:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | |||
| 00087a10:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 00087a20:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00087a30:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00087a40:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00087a50:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00087a60:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 00087a70:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 00087a80:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 00087a90:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 00087aa0:·2020·2020·202d·206e·616d·653a·2062·6c75·······-·name:·blu | |||
| 00087ab0:·6574·6f6f·7468·2e73·6572·7669·6365·0a20··etooth.service.· | |||
| 00087ac0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087ad0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087ae0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 00087af0:·206e·616d·653a·2062·6c75·6574·6f6f·7468···name:·bluetooth | |||
| 00087b00:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 00087b10:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087b20:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087b30:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00087b40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00087b50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00087b60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 421, 15 lines modified | Offset 421, 15 lines modified | ||
| 421 | Identifiers:·CCE-82496-1 | 421 | Identifiers:·CCE-82496-1 |
| 422 | ·············_\x8c_\x8u_\x8i····3.4.5 | 422 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 433 | apiVersion:·machineconfiguration.openshift.io/v1 | 433 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 434 | kind:·MachineConfig | 434 | kind:·MachineConfig |
| 435 | spec: | 435 | spec: |
| Offset 440, 15 lines modified | Offset 440, 15 lines modified | ||
| 440 | ······units: | 440 | ······units: |
| 441 | ······-·name:·debug-shell.service | 441 | ······-·name:·debug-shell.service |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | ······-·name:·debug-shell.socket | 444 | ······-·name:·debug-shell.socket |
| 445 | ········enabled:·false | 445 | ········enabled:·false |
| 446 | ········mask:·true | 446 | ········mask:·true |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 452 | apiVersion:·machineconfiguration.openshift.io/v1 | 452 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 453 | kind:·MachineConfig | 453 | kind:·MachineConfig |
| 454 | spec: | 454 | spec: |
| Offset 1870, 15 lines modified | Offset 1870, 15 lines modified | ||
| 1870 | ············_\x8c_\x8u_\x8i············3.1.16 | 1870 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1882 | apiVersion:·machineconfiguration.openshift.io/v1 | 1882 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1883 | kind:·MachineConfig | 1883 | kind:·MachineConfig |
| 1884 | spec: | 1884 | spec: |
| Offset 1889, 15 lines modified | Offset 1889, 15 lines modified | ||
| 1889 | ······units: | 1889 | ······units: |
| 1890 | ······-·name:·bluetooth.service | 1890 | ······-·name:·bluetooth.service |
| 1891 | ········enabled:·false | 1891 | ········enabled:·false |
| 1892 | ········mask:·true | 1892 | ········mask:·true |
| 1893 | ······-·name:·bluetooth.socket | 1893 | ······-·name:·bluetooth.socket |
| 1894 | ········enabled:·false | 1894 | ········enabled:·false |
| 1895 | ········mask:·true | 1895 | ········mask:·true |
| 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1901 | apiVersion:·machineconfiguration.openshift.io/v1 | 1901 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1902 | kind:·MachineConfig | 1902 | kind:·MachineConfig |
| 1903 | spec: | 1903 | spec: |
| Offset 2207, 15 lines modified | Offset 2207, 15 lines modified | ||
| 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2219 | apiVersion:·machineconfiguration.openshift.io/v1 | 2219 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2220 | kind:·MachineConfig | 2220 | kind:·MachineConfig |
| 2221 | spec: | 2221 | spec: |
| Offset 2226, 15 lines modified | Offset 2226, 15 lines modified | ||
| 2226 | ······units: | 2226 | ······units: |
| 2227 | ······-·name:·autofs.service | 2227 | ······-·name:·autofs.service |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | ······-·name:·autofs.socket | 2230 | ······-·name:·autofs.socket |
| 2231 | ········enabled:·false | 2231 | ········enabled:·false |
| 2232 | ········mask:·true | 2232 | ········mask:·true |
| 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2238 | apiVersion:·machineconfiguration.openshift.io/v1 | 2238 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2239 | kind:·MachineConfig | 2239 | kind:·MachineConfig |
| 2240 | spec: | 2240 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0005a1 | 0005a1b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0005a1 | 0005a1c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0005a1 | 0005a1d0:·2269·646d·3237·3336·3622·3e3c·7461·626c··"idm27366"><tabl | ||
| 0005a1 | 0005a1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0005a | 0005a1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0005a2 | 0005a200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0005a2 | 0005a210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0005a2 | 0005a220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0005a2 | 0005a230:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a240:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0005a2 | 0005a2b0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0005a2 | 0005a2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0005a2 | 0005a2d0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0005a2 | 0005a2e0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0005a | 0005a2f0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0005a3 | 0005a300:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0005a3 | 0005a310:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0005a3 | 0005a320:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0005a3 | 0005a330:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0005a3 | 0005a340:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0005a3 | 0005a350:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0005a3 | 0005a360:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | ||
| 0005a3 | 0005a370:·6e61·6d65·3a20·7373·6864·2e73·6572·7669··name:·sshd.servi | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a380:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | ||
| 0005a3 | 0005a390:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3a0:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0005a4 | 0005a400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0005a420 | 0005a410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0005a4 | 0005a420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0005a4 | 0005a430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0005a4 | 0005a440:·743d·2223·6964·6d32·3733·3637·2220·7461··t="#idm27367"·ta | ||
| 0005a4 | 0005a450:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0005a4 | 0005a460:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0005a4 | 0005a470:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0005a4 | 0005a480:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0005a4 | 0005a490:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0005a4 | 0005a4a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0005a1 | 0005a1b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0005a1 | 0005a1c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0005a1 | 0005a1d0:·2269·646d·3237·3336·3622·3e3c·7461·626c··"idm27366"><tabl | ||
| 0005a1 | 0005a1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0005a | 0005a1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0005a2 | 0005a200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0005a2 | 0005a210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0005a2 | 0005a220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0005a2 | 0005a230:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a240:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0005a2 | 0005a2b0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0005a2 | 0005a2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0005a2 | 0005a2d0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0005a2 | 0005a2e0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0005a | 0005a2f0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0005a3 | 0005a300:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0005a3 | 0005a310:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0005a3 | 0005a320:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0005a3 | 0005a330:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0005a3 | 0005a340:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0005a3 | 0005a350:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0005a3 | 0005a360:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | ||
| 0005a3 | 0005a370:·6e61·6d65·3a20·7373·6864·2e73·6572·7669··name:·sshd.servi | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a380:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | ||
| 0005a3 | 0005a390:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3a0:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0005a4 | 0005a400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0005a420 | 0005a410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0005a4 | 0005a420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0005a4 | 0005a430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0005a4 | 0005a440:·743d·2223·6964·6d32·3733·3637·2220·7461··t="#idm27367"·ta | ||
| 0005a4 | 0005a450:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0005a4 | 0005a460:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0005a4 | 0005a470:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0005a4 | 0005a480:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0005a4 | 0005a490:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0005a4 | 0005a4a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 65 lines modified | Offset 23059, 65 lines modified | ||
| 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | ||
| 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0005a190:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0005a190:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0005a1a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0005a1 | 0005a1a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0005a1 | 0005a1b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0005a1 | 0005a1c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0005a1 | 0005a1d0:·3733·3636·223e·3c74·6162·6c65·2063·6c61··7366"><table·cla | ||
| 0005a1 | 0005a1e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0005a | 0005a1f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0005a2 | 0005a200:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0005a2 | 0005a210:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0005a2 | 0005a220:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0005a230:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0005a240:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0005a250:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0005a2 | 0005a260:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0005a250:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0005a260:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0005a270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0005a2 | 0005a270:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0005a2 | 0005a280:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0005a2 | 0005a290:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0005a2 | 0005a2a0:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | ||
| 0005a2 | 0005a2b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0005a2 | 0005a2c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0005a2e0 | 0005a2d0:·3e61·7069·5665·7273·696f·6e3a·206d·6163··>apiVersion:·mac | ||
| 0005a2 | 0005a2e0:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | ||
| 0005a | 0005a2f0:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | ||
| 0005a310 | 0005a300:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | ||
| 0005a3 | 0005a310:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | ||
| 0005a3 | 0005a320:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | ||
| 0005a3 | 0005a330:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | ||
| 0005a3 | 0005a340:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | ||
| 0005a3 | 0005a350:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | ||
| 0005a370 | 0005a360:·733a·0a20·2020·2020·202d·206e·616d·653a··s:.······-·name: | ||
| 0005a3 | 0005a370:·2073·7368·642e·7365·7276·6963·650a·2020···sshd.service.·· | ||
| 0005a390:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a3a0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3b0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0005a3c0:·3a20·7373·6864·2e73·6f63·6b65·740a·2020··:·sshd.socket.·· | |||
| 0005a3 | 0005a380:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0005a3 | 0005a390:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0005a3a0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0005a3b0:·6e61·6d65·3a20·7373·6864·2e73·6f63·6b65··name:·sshd.socke | |||
| 0005a3c0:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | |||
| 0005a3d0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a3 | 0005a3e0:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0005a | 0005a3f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0005a410 | 0005a400:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0005a4 | 0005a410:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0005a4 | 0005a420:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0005a4 | 0005a430:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0005a4 | 0005a440:·646d·3237·3336·3722·2074·6162·696e·6465··dm27367"·tabinde | ||
| 0005a4 | 0005a450:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0005a4 | 0005a460:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0005a4 | 0005a470:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0005a4 | 0005a480:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0005a4 | 0005a490:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0005a4 | 0005a4a0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | ||
| 0005a4b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | ||
| 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 15095, 281 lines modified | Offset 15095, 281 lines modified | ||
| 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | ||
| 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003afd0:·6469·6174·696f·6e20·4 | 0003afd0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003afe0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003aff0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b000:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b010:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b020:·3330·3722·3e3c·7461·626c·6520·636c·6173··307"><table·clas | |||
| 0003b030:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b040:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b050:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b060:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b070:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b080:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b090:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003afe0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003aff0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b020:·2220·6964·3d22·6964·6d37·3330·3722·3e3c··"·id="idm7307">< | |||
| 0003b030:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b040:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b050:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b060:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b070:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b080:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b090:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b0a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b0b0:·7267·6574·3d22·2369·646d·3733·3038·2220··rget="#idm7308"· | |||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b120:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b130:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b140:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b150:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b160:·2069·643d·2269·646d·3733·3038·223e·3c74···id="idm7308"><t | |||
| 0003b170:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b180:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b190:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b1a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b1b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b0a0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b1e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b1f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b200:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b230:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b240:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b250:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b260:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b270:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b280:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b290:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b2a0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b2b0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b2c0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b2d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b2e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b2f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b300:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b310:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b320:·3330·3922·2074·6162·696e·6465·783d·2230··309"·tabindex="0 | |||
| 0003b330:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b340:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b350:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b360:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b370:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b380:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b390:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b3a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3c0:·7365·2220·6964·3d22·6964·6d37·3330·3922··se"·id="idm7309" | |||
| 0003b3d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b3e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b3f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b400:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b410:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b420:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b430:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b440:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b450:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b460:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b470:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b480:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b490:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4a0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b4b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b4c0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b4d0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b4e0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b4f0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b500:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b510:·206b·6572·6e65·6c3b·2074·6865·6e0a·0a69···kernel;·then..i | |||
| 0003b520:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b530:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b540:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003b550:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003b560:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003b570:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003b580:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003b590:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003b5a0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003b5b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b600:·6964·6d37·3331·3022·2074·6162·696e·6465··idm7310"·tabinde | |||
| 0003b610:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b620:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b630:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b640:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b650:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b660:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003b670:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003b680:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| Max diff block lines reached; 21382500/21419926 bytes (99.83%) of diff not shown. | |||
| Offset 15100, 281 lines modified | Offset 15100, 281 lines modified | ||
| 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b020:·656d·6564·6961·7469·6f6e·204 | 0003b020:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b030:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b040:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b050:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b060:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b070:·646d·3733·3037·223e·3c74·6162·6c65·2063··dm7307"><table·c | |||
| 0003b080:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b090:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b0a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b0b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b0c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b0d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b030:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b040:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b050:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b060:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b070:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003b080:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b090:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b0a0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b0b0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b0c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b0d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b0e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b0f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b100:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b110:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b120:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b130:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b140:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b150:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b160:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b170:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b180:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b190:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b1a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b1b0:·7365·2220·6964·3d22·6964·6d37·3330·3822··se"·id="idm7308" | |||
| 0003b1c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b1d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b1e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b1f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b200:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b0f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b100:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b230:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b240:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b250:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b260:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b270:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b280:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b290:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b2a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b2b0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b2c0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b2d0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b2e0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b2f0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b300:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b310:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b320:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b330:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b340:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b350:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b360:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b370:·646d·3733·3039·2220·7461·6269·6e64·6578··dm7309"·tabindex | |||
| 0003b380:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b390:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b3a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b3b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b3c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b3d0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b3e0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b3f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b400:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b410:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b420:·3039·223e·3c74·6162·6c65·2063·6c61·7373··09"><table·class | |||
| 0003b430:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b440:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b450:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b460:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b470:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b480:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b490:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b4a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b4b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b4d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b4e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b4f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b500:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b510:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b520:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b530:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b540:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b550:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003b560:·202d·7120·6b65·726e·656c·3b20·7468·656e···-q·kernel;·then | |||
| 0003b570:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b580:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b590:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003b5a0:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b5b0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b5c0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b5d0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b5e0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b5f0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b600:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b610:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b620:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b630:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b640:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b650:·3d22·2369·646d·3733·3130·2220·7461·6269··="#idm7310"·tabi | |||
| 0003b660:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b670:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b680:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b690:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b6a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b6b0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b6c0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003b6d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| Max diff block lines reached; 21677257/21714683 bytes (99.83%) of diff not shown. | |||
| Offset 15091, 280 lines modified | Offset 15091, 280 lines modified | ||
| 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | ||
| 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af90:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003afa0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003afb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003afc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003afd0:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003afe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003aff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b030:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b040:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b050:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af90:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003afa0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003afb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003afc0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003afd0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afe0:·643d·2269·646d·3733·3037·223e·3c70·7265··d="idm7307"><pre | |||
| 0003aff0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b000:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b010:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b020:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b030:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b040:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b050:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b060:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b070:·743d·2223·6964·6d37·3330·3822·2074·6162··t="#idm7308"·tab | |||
| 0003b080:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b090:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b0a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b0b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b0c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b0d0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b0e0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b120:·3d22·6964·6d37·3330·3822·3e3c·7461·626c··="idm7308"><tabl | |||
| 0003b130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b060:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b070:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b1f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b200:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b220:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b230:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b240:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b250:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b260:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b270:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b280:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b290:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b2a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b2b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2d0:·7461·7267·6574·3d22·2369·646d·3733·3039··target="#idm7309 | |||
| 0003b2e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b2f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b300:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b310:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b320:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b330:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b340:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b350:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b360:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b370:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b380:·2069·643d·2269·646d·3733·3039·223e·3c74···id="idm7309"><t | |||
| 0003b390:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b3c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b3d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b3e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b3f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b400:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b410:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b420:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b430:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b440:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b450:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b460:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b470:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b480:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b490:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b4a0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b4b0:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003b4c0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003b4d0:·726e·656c·3b20·7468·656e·0a0a·6966·2021··rnel;·then..if·! | |||
| 0003b4e0:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003b4f0:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003b500:·2020·646e·6620·696e·7374·616c·6c20·2d79····dnf·install·-y | |||
| 0003b510:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003b520:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b530:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b540:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b550:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b560:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b570:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b580:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b590:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b5a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5c0:·3733·3130·2220·7461·6269·6e64·6578·3d22··7310"·tabindex=" | |||
| 0003b5d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b5e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b5f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b600:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b610:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b620:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 0003b630:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 9288493/9325781 bytes (99.60%) of diff not shown. | |||
| Offset 118, 60 lines modified | Offset 118, 14 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Gather·the·package·facts | 130 | -·name:·Gather·the·package·facts |
| 171 | ··package_facts: | 131 | ··package_facts: |
| Offset 209, 14 lines modified | Offset 163, 60 lines modified | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | package·install·aide | 168 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 217 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 219 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 213 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 220 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 214 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 221 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 215 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 242, 28 lines modified | Offset 242, 14 lines modified | ||
| 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1066882/1071752 bytes (99.55%) of diff not shown. | |||
| Offset 14772, 205 lines modified | Offset 14772, 205 lines modified | ||
| 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | ||
| 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039ba0:·6961·7469·6f6e·204 | 00039ba0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039bb0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00039bc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039bd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039be0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039bf0:·2069·643d·2269·646d·3130·3630·3722·3e3c···id="idm10607">< | |||
| 00039c00:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039 | 00039bb0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039bc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039bd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039be0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039bf0:·3630·3722·3e3c·7461·626c·6520·636c·6173··607"><table·clas | |||
| 00039c00:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039c10:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039c20:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039c30:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039c40:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039c50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c60:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039c70:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039c80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039c90:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039ca0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039cc0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039cd0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039ce0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039cf0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039d00:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039d10:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039d20:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039d30:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039d40:·2d38·3735·3631·2d37·0a20·202d·2065·6e61··-87561-7.··-·ena | |||
| 00039d50:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039d60:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039d70:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039d80:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039d90:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039da0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039db0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039dc0:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039dd0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039 | 00039de0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | ||
| 00039 | 00039df0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | ||
| 00039e00:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039e10:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039e20:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039e30:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 00039e40:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 00039e50:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00039e60:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 00039e70:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 00039e80:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039e90:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 00039ea0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00039eb0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 00039ec0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 00039ed0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 00039ee0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039ef0:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| 00039f00:·4345·2d38·3735·3631·2d37·0a20·202d·2065··CE-87561-7.··-·e | |||
| 00039f10:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039f20:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039f30:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039f40:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039f50:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039f60:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039f70:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039f80:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039f90:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00039fa0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039fb0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039fc0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039fd0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039fe0:·6574·3d22·2369·646d·3130·3630·3822·2074··et="#idm10608"·t | |||
| 00039ff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003a000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003a010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003a020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003a030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003a040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a050:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003a060:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a070:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a080:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a090:·3036·3038·223e·3c74·6162·6c65·2063·6c61··0608"><table·cla | |||
| 0003a0a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a0b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a0c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a0d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a0e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a0f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a100:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a110:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a120:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a130:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a140:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a150:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a160:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a170:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a180:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003a190:·6163·6b61·6765·2069·6e73·7461·6c6c·2064··ackage·install·d | |||
| 0003a1a0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003 | 0003a1b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003 | 0003a1c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003 | 0003a1d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003 | 0003a1e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003 | 0003a1f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003 | 0003a200:·6964·6d31·3036·3039·2220·7461·6269·6e64··idm10609"·tabind | ||
| 0003 | 0003a210:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003 | 0003a220:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003 | 0003a230:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003 | 0003a240:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003 | 0003a250:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00039cf0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 00039d00:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 00039d10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00039d20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00039d30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039d40:·646d·3130·3630·3822·3e3c·7461·626c·6520··dm10608"><table· | |||
| Max diff block lines reached; 2841957/2868343 bytes (99.08%) of diff not shown. | |||
| Offset 84, 61 lines modified | Offset 84, 14 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-87561-7 | 87 | Identifiers:·CCE-87561-7 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | include·install_dnf-automatic | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | } | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 113 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 115 | ····dnf·install·-y·"dnf-automatic" | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=dnf-automatic | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | dnf·install·dnf-automatic | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 96 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 97 | ··package_facts: |
| Offset 171, 14 lines modified | Offset 124, 61 lines modified | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | package·install·dnf-automatic | 129 | package·install·dnf-automatic |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 141 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 143 | ····dnf·install·-y·"dnf-automatic" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | dnf·install·dnf-automatic | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_dnf-automatic | ||
| 160 | class·install_dnf-automatic·{ | ||
| 161 | ··package·{·'dnf-automatic': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=dnf-automatic | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 179 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 180 | automatic.conf. | 174 | automatic.conf. |
| 181 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 175 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 182 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 176 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 183 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 177 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 56 lines modified | Offset 189, 14 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-86671-5 | 190 | Identifiers:·CCE-86671-5 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 194249/199439 bytes (97.40%) of diff not shown. | |||
| Offset 15141, 281 lines modified | Offset 15141, 281 lines modified | ||
| 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | ||
| 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b2c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b2d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b2e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b2c0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b2d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b300:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b310:·3733·3037·223e·3c70·7265·3e3c·636f·6465··7307"><pre><code | |||
| 0003b320:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b330:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b340:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b350:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b360:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b370:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b380:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b390:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b3a0:·6d37·3330·3822·2074·6162·696e·6465·783d··m7308"·tabindex= | |||
| 0003b3b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b3c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b3d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b3e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b3f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b400:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b2f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b450:·3330·3822·3e3c·7461·626c·6520·636c·6173··308"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003b300:·643d·2269·646d·3733·3037·223e·3c74·6162··d="idm7307"><tab | ||
| 0003b310:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b320:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b330:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b340:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b350:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b380:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b390:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b550:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b560:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b570:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b580:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b590:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b5a0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b5b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b5c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b5d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b5e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b5f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b600:·3d22·2369·646d·3733·3039·2220·7461·6269··="#idm7309"·tabi | |||
| 0003b610:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b620:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b630:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b640:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b650:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b660:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b670:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b680:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b690:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b6a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b6b0:·646d·3733·3039·223e·3c74·6162·6c65·2063··dm7309"><table·c | |||
| 0003b6c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b6d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b6e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b6f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b700:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b710:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b720:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b730:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b740:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b750:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b760:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b770:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b780:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b790:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b7a0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b7b0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b7c0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b7d0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b7e0:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | |||
| 0003b7f0:·7569·6574·202d·7120·6b65·726e·656c·3b20··uiet·-q·kernel;· | |||
| 0003b800:·7468·656e·0a0a·6966·2021·2072·706d·202d··then..if·!·rpm·- | |||
| 0003b810:·7120·2d2d·7175·6965·7420·2261·6964·6522··q·--quiet·"aide" | |||
| 0003b820:·203b·2074·6865·6e0a·2020·2020·646e·6620···;·then.····dnf· | |||
| 0003b830:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b840:·220a·6669·0a0a·656c·7365·0a20·2020·2026··".fi..else.····& | |||
| 0003b850:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b860:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b870:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b880:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b890:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b8a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b8c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b8d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b8e0:·7267·6574·3d22·2369·646d·3733·3130·2220··rget="#idm7310"· | |||
| 0003b8f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b900:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b910:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b920:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b930:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b940:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b950:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003b960:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b970:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| Max diff block lines reached; 24411101/24448527 bytes (99.85%) of diff not shown. | |||
| Offset 15103, 281 lines modified | Offset 15103, 281 lines modified | ||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b050:·6d65·6469·6174·696f·6e20·4 | 0003b050:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b060:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b070:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b080:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b090:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0a0:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b0b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b0c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b0e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b0f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b100:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b110:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b060:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b070:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b080:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b090:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0a0:·7365·2220·6964·3d22·6964·6d37·3330·3722··se"·id="idm7307" | |||
| 0003b0b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b0c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b0d0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b0e0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b0f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b100:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b110:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b120:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b130:·7461·7267·6574·3d22·2369·646d·3733·3038··target="#idm7308 | |||
| 0003b140:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b150:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b160:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b170:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b180:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b190:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1a0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b1b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1e0:·6522·2069·643d·2269·646d·3733·3038·223e··e"·id="idm7308"> | |||
| 0003b1f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b200:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b210:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b220:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b230:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b120:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b130:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b260:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b270:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b280:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b290:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b2a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b2b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b2c0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b2d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b2e0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b2f0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b300:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b310:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b320:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b330:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b340:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b350:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b360:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b370:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b380:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b390:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b3a0:·6d37·3330·3922·2074·6162·696e·6465·783d··m7309"·tabindex= | |||
| 0003b3b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b3c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b3d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b3e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b3f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b400:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b410:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d37·3330··apse"·id="idm730 | |||
| 0003b450:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b460:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b470:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b480:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b490:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b4a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b4b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b4c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b4e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b4f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b500:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b510:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b520:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b540:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b550:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b560:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b570:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b580:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b590:·2d71·206b·6572·6e65·6c3b·2074·6865·6e0a··-q·kernel;·then. | |||
| 0003b5a0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b5b0:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b5c0:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003b5d0:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003b5e0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b5f0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b600:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b610:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b620:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b630:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b640:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b650:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b660:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b670:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b680:·2223·6964·6d37·3331·3022·2074·6162·696e··"#idm7310"·tabin | |||
| 0003b690:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b6c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b6d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b6e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003b6f0:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003b700:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| Max diff block lines reached; 11231716/11269142 bytes (99.67%) of diff not shown. | |||
| Offset 103, 60 lines modified | Offset 103, 14 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | include·install_aide | ||
| 120 | class·install_aide·{ | ||
| 121 | ··package·{·'aide': | ||
| 122 | ····ensure·=>·'installed', | ||
| 123 | ··} | ||
| 124 | } | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·rpm·--quiet·-q·kernel;·then | ||
| 132 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 133 | ····dnf·install·-y·"aide" | ||
| 134 | fi | ||
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | dnf·install·aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | -·name:·Gather·the·package·facts | 115 | -·name:·Gather·the·package·facts |
| 156 | ··package_facts: | 116 | ··package_facts: |
| Offset 194, 14 lines modified | Offset 148, 60 lines modified | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | package·install·aide | 153 | package·install·aide |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·rpm·--quiet·-q·kernel;·then | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 166 | ····dnf·install·-y·"aide" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | dnf·install·aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 205 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 206 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 220, 28 lines modified | Offset 220, 14 lines modified | ||
| 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1320928/1325947 bytes (99.62%) of diff not shown. | |||
| Offset 15094, 281 lines modified | Offset 15094, 281 lines modified | ||
| 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003afc0:·656d·6564·6961·7469·6f6e·204 | 0003afc0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003afd0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003afe0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aff0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b000:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b010:·646d·3733·3037·223e·3c74·6162·6c65·2063··dm7307"><table·c | |||
| 0003b020:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b030:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b040:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b050:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b060:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b070:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b080:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003afd0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003afe0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aff0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b000:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b010:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003b020:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b030:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b040:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b050:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b060:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b070:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b080:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b090:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b0a0:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b0b0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b0c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b0d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b0e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b0f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b100:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b110:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b120:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b130:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b140:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b150:·7365·2220·6964·3d22·6964·6d37·3330·3822··se"·id="idm7308" | |||
| 0003b160:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b170:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b180:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b190:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b1a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b090:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b0a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b1d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b1e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b200:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b210:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b220:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b230:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b240:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b250:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b260:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b270:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b280:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b290:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b2a0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b2b0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b2c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b2d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b300:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b310:·646d·3733·3039·2220·7461·6269·6e64·6578··dm7309"·tabindex | |||
| 0003b320:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b330:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b340:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b350:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b360:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b370:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b380:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b390:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b3a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b3b0:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b3c0:·3039·223e·3c74·6162·6c65·2063·6c61·7373··09"><table·class | |||
| 0003b3d0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3e0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3f0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b400:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b410:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b420:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b430:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b440:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b450:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b460:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b470:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b480:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b490:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b4a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b4b0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | |||
| 0003b4c0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b4d0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b4e0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b4f0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003b500:·202d·7120·6b65·726e·656c·3b20·7468·656e···-q·kernel;·then | |||
| 0003b510:·0a0a·6966·2021·2072·706d·202d·7120·2d2d··..if·!·rpm·-q·-- | |||
| 0003b520:·7175·6965·7420·2261·6964·6522·203b·2074··quiet·"aide"·;·t | |||
| 0003b530:·6865·6e0a·2020·2020·646e·6620·696e·7374··hen.····dnf·inst | |||
| 0003b540:·616c·6c20·2d79·2022·6169·6465·220a·6669··all·-y·"aide".fi | |||
| 0003b550:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b560:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b570:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b580:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b590:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b5a0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b5b0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b5c0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b5d0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b5e0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b5f0:·3d22·2369·646d·3733·3130·2220·7461·6269··="#idm7310"·tabi | |||
| 0003b600:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b610:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b620:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b630:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b640:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b650:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b660:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003b670:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| Max diff block lines reached; 10844938/10882364 bytes (99.66%) of diff not shown. | |||
| Offset 101, 60 lines modified | Offset 101, 14 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·rpm·--quiet·-q·kernel;·then | ||
| 130 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 131 | ····dnf·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | dnf·install·aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | -·name:·Gather·the·package·facts | 113 | -·name:·Gather·the·package·facts |
| 154 | ··package_facts: | 114 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 146, 60 lines modified | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | package·install·aide | 151 | package·install·aide |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 162 | if·rpm·--quiet·-q·kernel;·then | ||
| 163 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 164 | ····dnf·install·-y·"aide" | ||
| 165 | fi | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | dnf·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | include·install_aide | ||
| 181 | class·install_aide·{ | ||
| 182 | ··package·{·'aide': | ||
| 183 | ····ensure·=>·'installed', | ||
| 184 | ··} | ||
| 185 | } | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 218, 28 lines modified | Offset 218, 14 lines modified | ||
| 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1263416/1268435 bytes (99.60%) of diff not shown. | |||
| Offset 15133, 280 lines modified | Offset 15133, 280 lines modified | ||
| 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | ||
| 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b230:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b270:·7365·2220·6964·3d22·6964·6d37·3330·3722··se"·id="idm7307" | |||
| 0003b230:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b240:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b250:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b260:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b270:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b280:·3d22·6964·6d37·3330·3722·3e3c·7072·653e··="idm7307"><pre> | |||
| 0003b290:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2a0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2b0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b2c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2 | 0003b280:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b290:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b310:·3d22·2369·646d·3733·3038·2220·7461·6269··="#idm7308"·tabi | |||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b380:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b390:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b3a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b3b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b3c0:·2269·646d·3733·3038·223e·3c74·6162·6c65··"idm7308"><table | |||
| 0003b3d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b3e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b400:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b410:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b300:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b310:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b440:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b450:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b460:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b470:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b480:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b490:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b4a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b4b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b4c0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b4d0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b4e0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b4f0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b500:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b510:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b520:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b530:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b540:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b550:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b570:·6172·6765·743d·2223·6964·6d37·3330·3922··arget="#idm7309" | |||
| 0003b580:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b590:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b5a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b5b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b5c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b5d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b5e0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d37·3330·3922·3e3c·7461··id="idm7309"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003b730:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003b740:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003b750:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003b760:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | |||
| 0003b770:·6e65·6c3b·2074·6865·6e0a·0a69·6620·2120··nel;·then..if·!· | |||
| 0003b780:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003b790:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003b7a0:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 0003b7b0:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003b7c0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003b7d0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003b7e0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003b7f0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003b800:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003b810:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b820:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b830:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b840:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b850:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b860:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | |||
| 0003b870:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b880:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b890:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b8a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b8b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b8c0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b8d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b8e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| Max diff block lines reached; 24236243/24273531 bytes (99.85%) of diff not shown. | |||
| Offset 15182, 414 lines modified | Offset 15182, 414 lines modified | ||
| 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | ||
| 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b540:·6961·7469·6f6e·20 | 0003b540:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b550:·6970·7420 | 0003b550:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b560:·6469 | 0003b560:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b570:· | 0003b570:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b580:·7365 | 0003b580:·6c61·7073·6522·2069·643d·2269·646d·3639··lapse"·id="idm69 | ||
| 0003b590:·3 | 0003b590:·3636·223e·3c74·6162·6c65·2063·6c61·7373··66"><table·class | ||
| 0003b5a0:· | 0003b5a0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b5b0:· | 0003b5b0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b5c0:·6 | 0003b5c0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b5d0:· | 0003b5d0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b5e0:· | 0003b5e0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b5f0:· | 0003b5f0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b600:· | 0003b600:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b610:· | 0003b610:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b620:· | 0003b620:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b630:· | 0003b630:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b640:·3 | 0003b640:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b650:· | 0003b650:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b660:· | 0003b660:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b670:· | 0003b670:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b680:·2 | 0003b680:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b690:· | 0003b690:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b6a0:·20 | 0003b6a0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b6b0:·74 | 0003b6b0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b6c0:· | 0003b6c0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b6d0:· | 0003b6d0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b6e0:· | 0003b6e0:·2d20·4343·452d·3839·3934·342d·330a·2020··-·CCE-89944-3.·· | ||
| 0003b6f0:· | 0003b6f0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b700:· | 0003b700:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b710:· | 0003b710:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003b720:· | 0003b720:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003b730:·2d | 0003b730:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003b740:·2 | 0003b740:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003b750:·0 | 0003b750:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003b760:· | 0003b760:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b770:· | 0003b770:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003b780:· | 0003b780:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003b790:· | 0003b790:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b7a0:· | 0003b7a0:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003b7b0:· | 0003b7b0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003b7c0:· | 0003b7c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003b7d0:·20 | 0003b7d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003b7e0:· | 0003b7e0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003b7f0:· | 0003b7f0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003b800:· | 0003b800:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003b810:·6 | 0003b810:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003b820:· | 0003b820:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003b830:· | 0003b830:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003b840:· | 0003b840:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003b850:· | 0003b850:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003b860:· | 0003b860:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003b870:·6 | 0003b870:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b880:· | 0003b880:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b890:·6 | 0003b890:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b8a0:·6 | 0003b8a0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b8b0:· | 0003b8b0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b8c0:· | 0003b8c0:·6c6c·5f63·6d64·3a20·646e·6620·7265·696e··ll_cmd:·dnf·rein | ||
| 0003b8d0:· | 0003b8d0:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b8e0:· | 0003b8e0:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003b8f0:· | 0003b8f0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003b900:·6 | 0003b900:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003b910:·6 | 0003b910:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003b920:· | 0003b920:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b930:· | 0003b930:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003b940:·20 | 0003b940:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003b950:·6 | 0003b950:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003b960:· | 0003b960:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003b970:· | 0003b970:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003b980:·6 | 0003b980:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b990:·7 | 0003b990:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003b9a0:· | 0003b9a0:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| 0003b9b0:·6 | 0003b9b0:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b9c0:·6 | 0003b9c0:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b9d0:· | 0003b9d0:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b9e0:· | 0003b9e0:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b9f0:·7 | 0003b9f0:·733a·0a20·202d·2043·4345·2d38·3939·3434··s:.··-·CCE-89944 | ||
| 0003ba00:· | 0003ba00:·2d33·0a20·202d·2043·4a49·532d·352e·3130··-3.··-·CJIS-5.10 | ||
| 0003ba10:· | 0003ba10:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003ba20:· | 0003ba20:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003ba30:· | 0003ba30:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003ba40:· | 0003ba40:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003ba50:· | 0003ba50:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003ba60:· | 0003ba60:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003ba70:· | 0003ba70:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003ba80:·3 | 0003ba80:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003ba90:· | 0003ba90:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003baa0:· | 0003baa0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bab0:· | 0003bab0:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003bac0:· | 0003bac0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003bad0:· | 0003bad0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003bae0:· | 0003bae0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003baf0:·63 | 0003baf0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003bb00:·6 | 0003bb00:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003bb10:· | 0003bb10:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003bb20:·202 | 0003bb20:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003bb30:· | 0003bb30:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003bb40:· | 0003bb40:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003bb50:· | 0003bb50:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003bb60:· | 0003bb60:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003bb70:· | 0003bb70:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003bb80:· | 0003bb80:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003bb90:· | 0003bb90:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003bba0:· | 0003bba0:·7461·6c6c·2063·6f6d·6d61·6e64·2028·7a79··tall·command·(zy | ||
| 0003bbb0:· | 0003bbb0:·7070·6572·2927·0a20·2073·6574·5f66·6163··pper)'.··set_fac | ||
| 0003bbc0:· | 0003bbc0:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003bbd0:· | 0003bbd0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003bbe0:· | 0003bbe0:·5f63·6d64·3a20·7a79·7070·6572·2069·6e20··_cmd:·zypper·in· | ||
| 0003bbf0:·2d | 0003bbf0:·2d66·202d·790a·2020·7768·656e·3a0a·2020··-f·-y.··when:.·· | ||
| 0003bc00:· | 0003bc00:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003bc10:· | 0003bc10:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bc20:· | 0003bc20:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003bc30:· | 0003bc30:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003bc40:·6 | 0003bc40:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bc50:·6 | 0003bc50:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003bc60:·6 | 0003bc60:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003bc70:· | 0003bc70:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bc80:·6 | 0003bc80:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003bc90:· | 0003bc90:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003bca0:·6 | 0003bca0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| Max diff block lines reached; 6381331/6437111 bytes (99.13%) of diff not shown. | |||
| Offset 103, 33 lines modified | Offset 103, 14 lines modified | ||
| 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·Gather·the·package·facts | 115 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 116 | ··package_facts: |
| Offset 302, 14 lines modified | Offset 283, 33 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 283 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 284 | ··-·high_complexity |
| 304 | ··-·high_severity | 285 | ··-·high_severity |
| 305 | ··-·medium_disruption | 286 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 287 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 288 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 289 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 309 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 303 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 310 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 304 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 311 | ····*·GnuTLS·library | 305 | ····*·GnuTLS·library |
| 312 | ····*·OpenSSL·library | 306 | ····*·OpenSSL·library |
| 313 | ····*·NSS·library | 307 | ····*·NSS·library |
| 314 | ····*·OpenJDK | 308 | ····*·OpenJDK |
| 315 | ····*·Libkrb5 | 309 | ····*·Libkrb5 |
| Offset 331, 58 lines modified | Offset 331, 14 lines modified | ||
| 331 | ·············_\x8i_\x8s_\x8m······1446 | 331 | ·············_\x8i_\x8s_\x8m······1446 |
| 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 336 | ·············_\x8c_\x8i_\x8s······1.6.1 | 336 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | var_system_crypto_policy='DEFAULT' | ||
| 340 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 341 | rc=$? | ||
| 342 | if·test·"$rc"·=·127;·then | ||
| 343 | » echo·"$stderr_of_call"·>&2 | ||
| 344 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 345 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 346 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 347 | » false··#·end·with·an·error·code | ||
| 348 | elif·test·"$rc"·!=·0;·then | ||
| 349 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 350 | » false··#·end·with·an·error·code | ||
| 351 | fi | ||
| 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 357 | --- | ||
| 358 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 359 | kind:·MachineConfig | ||
| 360 | spec: | ||
| 361 | ··config: | ||
| 362 | ····ignition: | ||
| 363 | ······version:·3.1.0 | ||
| 364 | ····systemd: | ||
| 365 | ······units: | ||
| 366 | ········-·name:·configure-crypto-policy.service | ||
| 367 | ··········enabled:·true | ||
| 368 | ··········contents:·| | ||
| 369 | ············[Unit] | ||
| 370 | ············Before=kubelet.service | ||
| 371 | ············[Service] | ||
| 372 | ············Type=oneshot | ||
| 373 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 374 | ············RemainAfterExit=yes | ||
| 375 | ············[Install] | ||
| 376 | ············WantedBy=multi-user.target | ||
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 378 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 379 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 380 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 381 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 382 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 343 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 383 | ··set_fact: | 344 | ··set_fact: |
| Offset 429, 14 lines modified | Offset 385, 58 lines modified | ||
| Max diff block lines reached; 694454/700417 bytes (99.15%) of diff not shown. | |||
| Offset 15208, 414 lines modified | Offset 15208, 414 lines modified | ||
| 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | ||
| 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b6e0:·7469·6f6e·20 | 0003b6e0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b6f0:·7420 | 0003b6f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b700:·7620 | 0003b700:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b710:·6 | 0003b710:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b720:·2220 | 0003b720:·7073·6522·2069·643d·2269·646d·3639·3636··pse"·id="idm6966 | ||
| 0003b730:· | 0003b730:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b740:· | 0003b740:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b750:·6 | 0003b750:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b760:· | 0003b760:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b770:·6 | 0003b770:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b780:· | 0003b780:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b790:· | 0003b790:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b7a0:·7 | 0003b7a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b7b0:· | 0003b7b0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b7c0:·3 | 0003b7c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b7d0:· | 0003b7d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b7e0:· | 0003b7e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b7f0:· | 0003b7f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b800:·7 | 0003b800:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b810:· | 0003b810:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b820:·6 | 0003b820:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b830:· | 0003b830:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003b840:·6 | 0003b840:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003b850:· | 0003b850:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003b860:· | 0003b860:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003b870:· | 0003b870:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003b880:· | 0003b880:·4343·452d·3839·3934·342d·330a·2020·2d20··CCE-89944-3.··-· | ||
| 0003b890:· | 0003b890:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003b8a0:· | 0003b8a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b8b0:· | 0003b8b0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b8c0:· | 0003b8c0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b8d0:· | 0003b8d0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b8e0:· | 0003b8e0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b8f0:· | 0003b8f0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b900:· | 0003b900:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b910:· | 0003b910:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b920:·2 | 0003b920:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b930:· | 0003b930:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b940:· | 0003b940:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b950:·2 | 0003b950:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003b960:· | 0003b960:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003b970:· | 0003b970:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003b980:· | 0003b980:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003b990:· | 0003b990:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003b9a0:· | 0003b9a0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003b9b0:· | 0003b9b0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003b9c0:· | 0003b9c0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003b9d0:· | 0003b9d0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003b9e0:· | 0003b9e0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003b9f0:·6 | 0003b9f0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003ba00:· | 0003ba00:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003ba10:· | 0003ba10:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003ba20:· | 0003ba20:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003ba30:·6 | 0003ba30:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003ba40:· | 0003ba40:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003ba50:·6 | 0003ba50:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003ba60:· | 0003ba60:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003ba70:· | 0003ba70:·616c·6c20·2d79·0a20·2077·6865·6e3a·0a20··all·-y.··when:.· | ||
| 0003ba80:· | 0003ba80:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003ba90:· | 0003ba90:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003baa0:· | 0003baa0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003bab0:· | 0003bab0:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003bac0:· | 0003bac0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bad0:· | 0003bad0:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003bae0:· | 0003bae0:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003baf0:·6 | 0003baf0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bb00:· | 0003bb00:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003bb10:·6 | 0003bb10:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003bb20:·61 | 0003bb20:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bb30:·6 | 0003bb30:·636b·6167·6573·0a20·2020·2029·0a20·202d··ckages.····).··- | ||
| 0003bb40:· | 0003bb40:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003bb50:· | 0003bb50:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003bb60:· | 0003bb60:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003bb70:· | 0003bb70:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003bb80:· | 0003bb80:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003bb90:· | 0003bb90:·0a20·202d·2043·4345·2d38·3939·3434·2d33··.··-·CCE-89944-3 | ||
| 0003bba0:· | 0003bba0:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bbb0:· | 0003bbb0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003bbc0:· | 0003bbc0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bbd0:· | 0003bbd0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bbe0:· | 0003bbe0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bbf0:· | 0003bbf0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bc00:· | 0003bc00:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bc10:· | 0003bc10:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc20:· | 0003bc20:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003bc30:· | 0003bc30:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003bc40:· | 0003bc40:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bc50:·72 | 0003bc50:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003bc60:· | 0003bc60:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003bc70:· | 0003bc70:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003bc80:· | 0003bc80:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003bc90:· | 0003bc90:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003bca0:· | 0003bca0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003bcb0:·6 | 0003bcb0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003bcc0:·2 | 0003bcc0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003bcd0:· | 0003bcd0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003bce0:· | 0003bce0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003bcf0:· | 0003bcf0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bd00:· | 0003bd00:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003bd10:· | 0003bd10:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003bd20:· | 0003bd20:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003bd30:· | 0003bd30:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003bd40:· | 0003bd40:·6c6c·2063·6f6d·6d61·6e64·2028·7a79·7070··ll·command·(zypp | ||
| 0003bd50:· | 0003bd50:·6572·2927·0a20·2073·6574·5f66·6163·743a··er)'.··set_fact: | ||
| 0003bd60:· | 0003bd60:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003bd70:· | 0003bd70:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003bd80:· | 0003bd80:·6d64·3a20·7a79·7070·6572·2069·6e20·2d66··md:·zypper·in·-f | ||
| 0003bd90:· | 0003bd90:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003bda0:· | 0003bda0:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003bdb0:· | 0003bdb0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bdc0:· | 0003bdc0:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003bdd0:· | 0003bdd0:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003bde0:· | 0003bde0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bdf0:·6 | 0003bdf0:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003be00:· | 0003be00:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003be10:·6 | 0003be10:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003be20:· | 0003be20:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003be30:· | 0003be30:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003be40:· | 0003be40:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| Max diff block lines reached; 19460128/19515908 bytes (99.71%) of diff not shown. | |||
| Offset 15120, 280 lines modified | Offset 15120, 280 lines modified | ||
| 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | ||
| 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b160:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b170:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b180:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b190:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1a0:·6522·2069·643d·2269·646d·3733·3037·223e··e"·id="idm7307"> | |||
| 0003b1b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b1c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b1d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b1e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b200:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b210:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b220:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b160:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b170:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b180:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b190:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1b0:·2269·646d·3733·3037·223e·3c70·7265·3e3c··"idm7307"><pre>< | |||
| 0003b1c0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b1d0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b1e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d37·3330·3822·2074·6162·696e··"#idm7308"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b2b0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b2c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b2d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b2e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b2f0:·6964·6d37·3330·3822·3e3c·7461·626c·6520··idm7308"><table· | |||
| 0003b300:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b310:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b320:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b330:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b340:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b230:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b360:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b370:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b380:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b390:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b3a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b3b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b3c0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b3d0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b3e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b3f0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b400:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b410:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b420:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b430:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b440:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b450:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b460:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b470:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b480:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b490:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b4a0:·7267·6574·3d22·2369·646d·3733·3039·2220··rget="#idm7309"· | |||
| 0003b4b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b4c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b4d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b4e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b4f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b500:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b510:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b520:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b530:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b540:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b550:·643d·2269·646d·3733·3039·223e·3c74·6162··d="idm7309"><tab | |||
| 0003b560:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b570:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b580:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b590:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b5a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b5b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b5c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b5d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b5e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b5f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b600:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b610:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b620:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b630:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b640:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b650:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b660:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b670:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b680:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | |||
| 0003b690:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | |||
| 0003b6a0:·656c·3b20·7468·656e·0a0a·6966·2021·2072··el;·then..if·!·r | |||
| 0003b6b0:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b6c0:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b6d0:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b6e0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b6f0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b700:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b710:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b720:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b730:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b740:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b750:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b760:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b770:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b780:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b790:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | |||
| 0003b7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b7f0:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b800:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| Max diff block lines reached; 10873093/10910381 bytes (99.66%) of diff not shown. | |||
| Offset 105, 60 lines modified | Offset 105, 14 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | -·name:·Gather·the·package·facts | 117 | -·name:·Gather·the·package·facts |
| 158 | ··package_facts: | 118 | ··package_facts: |
| Offset 196, 14 lines modified | Offset 150, 60 lines modified | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | package·install·aide | 155 | package·install·aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 58 lines modified | Offset 279, 14 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1135386/1140938 bytes (99.51%) of diff not shown. | |||
| Offset 15124, 280 lines modified | Offset 15124, 280 lines modified | ||
| 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | ||
| 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b1a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b1b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1e0:·2220·6964·3d22·6964·6d37·3330·3722·3e3c··"·id="idm7307">< | |||
| 0003b1f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b200:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b210:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b220:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b230:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b240:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b250:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b260:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1a0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b1b0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b1c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b1d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b1e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b1f0:·6964·6d37·3330·3722·3e3c·7072·653e·3c63··idm7307"><pre><c | |||
| 0003b200:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b210:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b220:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b230:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b240:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b250:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b260:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b270:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b280:·2369·646d·3733·3038·2220·7461·6269·6e64··#idm7308"·tabind | |||
| 0003b290:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b2a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b2b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b2c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b2d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2e0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b2f0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b300:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b310:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b320:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b330:·646d·3733·3038·223e·3c74·6162·6c65·2063··dm7308"><table·c | |||
| 0003b340:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b350:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b360:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b370:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b380:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b | 0003b270:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b3b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b3c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b3d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b3e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b3f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b400:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b410:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b420:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b430:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b440:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b450:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b460:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b470:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b480:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b490:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b4a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b4b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b4c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b4d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b4e0:·6765·743d·2223·6964·6d37·3330·3922·2074··get="#idm7309"·t | |||
| 0003b4f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b500:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b510:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b520:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b530:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b540:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b550:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b560:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b570:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b580:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b590:·3d22·6964·6d37·3330·3922·3e3c·7461·626c··="idm7309"><tabl | |||
| 0003b5a0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b5b0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b5c0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b5d0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b5e0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b5f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b600:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b610:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b620:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b630:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b640:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b650:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b660:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b670:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b680:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b690:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003b6a0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b6b0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b6c0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003b6d0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003b6e0:·6c3b·2074·6865·6e0a·0a69·6620·2120·7270··l;·then..if·!·rp | |||
| 0003b6f0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b700:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b710:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b720:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b730:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b740:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b750:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b760:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b770:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b780:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b790:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b7a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b7b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b7c0:·2d74·6172·6765·743d·2223·6964·6d37·3331··-target="#idm731 | |||
| 0003b7d0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b7e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b7f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b800:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b810:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b820:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b830:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 0003b840:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| Max diff block lines reached; 10873300/10910588 bytes (99.66%) of diff not shown. | |||
| Offset 106, 60 lines modified | Offset 106, 14 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | include·install_aide | ||
| 123 | class·install_aide·{ | ||
| 124 | ··package·{·'aide': | ||
| 125 | ····ensure·=>·'installed', | ||
| 126 | ··} | ||
| 127 | } | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | dnf·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 119 | ··package_facts: |
| Offset 197, 14 lines modified | Offset 151, 60 lines modified | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | package·install·aide | 156 | package·install·aide |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 167 | if·rpm·--quiet·-q·kernel;·then | ||
| 168 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 169 | ····dnf·install·-y·"aide" | ||
| 170 | fi | ||
| 171 | else | ||
| 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 173 | fi | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | dnf·install·aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | include·install_aide | ||
| 186 | class·install_aide·{ | ||
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 197 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 198 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 199 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 200 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 280, 58 lines modified | Offset 280, 14 lines modified | ||
| 280 | ·············_\x8i_\x8s_\x8m······1446 | 280 | ·············_\x8i_\x8s_\x8m······1446 |
| 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1135386/1140938 bytes (99.51%) of diff not shown. | |||
| Offset 15121, 281 lines modified | Offset 15121, 281 lines modified | ||
| 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b170:·6d65·6469·6174·696f·6e20·4 | 0003b170:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b180:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b190:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1c0:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b1d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b1e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b200:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b210:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b220:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b230:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b180:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b190:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b1a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b1b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b1c0:·7365·2220·6964·3d22·6964·6d37·3330·3722··se"·id="idm7307" | |||
| 0003b1d0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b1e0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b1f0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b200:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b210:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b220:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b230:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b240:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b250:·7461·7267·6574·3d22·2369·646d·3733·3038··target="#idm7308 | |||
| 0003b260:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b270:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b280:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b290:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b2a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b2b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b2c0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b2d0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b2e0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2f0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b300:·6522·2069·643d·2269·646d·3733·3038·223e··e"·id="idm7308"> | |||
| 0003b310:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b320:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b330:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b340:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b350:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b240:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b250:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b380:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b390:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b3a0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b3b0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b3c0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b3d0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b3e0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b3f0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b400:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b410:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b420:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b430:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b440:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b450:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b460:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b470:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b480:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b490:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b4a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b4b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b4c0:·6d37·3330·3922·2074·6162·696e·6465·783d··m7309"·tabindex= | |||
| 0003b4d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b4e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b4f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b500:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b510:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b520:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b530:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b540:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b550:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b560:·6170·7365·2220·6964·3d22·6964·6d37·3330··apse"·id="idm730 | |||
| 0003b570:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b580:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b590:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b5a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b5b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b5d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b5f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b600:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b610:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b620:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b630:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b640:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b650:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b660:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b670:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b680:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b690:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b6a0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b6b0:·2d71·206b·6572·6e65·6c3b·2074·6865·6e0a··-q·kernel;·then. | |||
| 0003b6c0:·0a69·6620·2120·7270·6d20·2d71·202d·2d71··.if·!·rpm·-q·--q | |||
| 0003b6d0:·7569·6574·2022·6169·6465·2220·3b20·7468··uiet·"aide"·;·th | |||
| 0003b6e0:·656e·0a20·2020·2064·6e66·2069·6e73·7461··en.····dnf·insta | |||
| 0003b6f0:·6c6c·202d·7920·2261·6964·6522·0a66·690a··ll·-y·"aide".fi. | |||
| 0003b700:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b710:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b720:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b730:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b740:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b750:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b760:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b770:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b780:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b790:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b7a0:·2223·6964·6d37·3331·3022·2074·6162·696e··"#idm7310"·tabin | |||
| 0003b7b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b7c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b7d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b7e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b7f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b800:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003b810:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003b820:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| Max diff block lines reached; 10872334/10909760 bytes (99.66%) of diff not shown. | |||
| Offset 105, 60 lines modified | Offset 105, 14 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | -·name:·Gather·the·package·facts | 117 | -·name:·Gather·the·package·facts |
| 158 | ··package_facts: | 118 | ··package_facts: |
| Offset 196, 14 lines modified | Offset 150, 60 lines modified | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | package·install·aide | 155 | package·install·aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 58 lines modified | Offset 279, 14 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1135386/1140938 bytes (99.51%) of diff not shown. | |||
| Offset 15425, 251 lines modified | Offset 15425, 251 lines modified | ||
| 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | ||
| 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003c470:·6564·6961·7469·6f6e·204 | 0003c470:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003c480:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c4c0:·6522·2069·643d·2269·646d·3739·3435·223e··e"·id="idm7945"> | |||
| 0003c4d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003c4 | 0003c480:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003c490:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c4a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c4b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c4c0:·3739·3435·223e·3c74·6162·6c65·2063·6c61··7945"><table·cla | |||
| 0003c4d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c4e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c4f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c500:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c510:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c520:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c530:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c540:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c550:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c560:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c570:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c580:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c590:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c5a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c5b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c5c0:·6e61·6d65·3a20·456e·7375·7265·2063·7279··name:·Ensure·cry | |||
| 0003c5d0:·7074·6f2d·706f·6c69·6369·6573·2069·7320··pto-policies·is· | |||
| 0003c5e0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003c5f0:·6167·653a·0a20·2020·206e·616d·653a·2063··age:.····name:·c | |||
| 0003c | 0003c600:·7279·7074·6f2d·706f·6c69·6369·6573·0a20··rypto-policies.· | ||
| 0003c500:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003c510:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c520:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c530:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c540:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c550:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c560:·3d22·2369·646d·3739·3436·2220·7461·6269··="#idm7946"·tabi | |||
| 0003c570:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c580:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c590:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c5a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c5b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c5c0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003c5d0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003c5e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c5f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c600:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c610:·2269·646d·3739·3436·223e·3c74·6162·6c65··"idm7946"><table | |||
| 0003c620:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c630:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c640:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c650:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c660:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c670:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c680:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c6 | 0003c610:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 0003c620:·740a·2020·7461·6773·3a0a·2020·2d20·4343··t.··tags:.··-·CC | |||
| 0003c630:·452d·3839·3636·382d·380a·2020·2d20·656e··E-89668-8.··-·en | |||
| 0003c640:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c650:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c660:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c670:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c680:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c690:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c6a0:·2070·6163·6b61·6765·5f63·7279·7074·6f2d···package_crypto- | |||
| 0003c6b0:·706f·6c69·6369·6573·5f69·6e73·7461·6c6c··policies_install | |||
| 0003c6c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c6d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c6e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c6f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c710:·6765·743d·2223·6964·6d37·3934·3622·2074··get="#idm7946"·t | |||
| 0003c720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c780:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c790:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c7a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c7b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c7c0:·3934·3622·3e3c·7461·626c·6520·636c·6173··946"><table·clas | |||
| 0003c7d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c7e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c7f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c800:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c810:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c | 0003c820:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003c830:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c6b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c6c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c6d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c6e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c6f0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c700:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c710:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003c720:·6c5f·6372·7970·746f·2d70·6f6c·6963·6965··l_crypto-policie | |||
| 0003c730:·730a·0a63·6c61·7373·2069·6e73·7461·6c6c··s..class·install | |||
| 0003c740:·5f63·7279·7074·6f2d·706f·6c69·6369·6573··_crypto-policies | |||
| 0003c750:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003c760:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003c770:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c780:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c790:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003c7a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c7b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c7c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c7d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c7e0:·7461·7267·6574·3d22·2369·646d·3739·3437··target="#idm7947 | |||
| 0003c7f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c800:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c810:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c820:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c830:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c840:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c850:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003c860:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| Max diff block lines reached; 6755544/6788830 bytes (99.51%) of diff not shown. | |||
| Offset 129, 78 lines modified | Offset 129, 78 lines modified | ||
| 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 130 | Severity: ···medium | 130 | Severity: ···medium |
| 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 132 | Identifiers:·CCE-89668-8 | 132 | Identifiers:·CCE-89668-8 |
| 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"crypto-policies" | ||
| 139 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | include·install_crypto-policies | ||
| 146 | class·install_crypto-policies·{ | ||
| 147 | ··package·{·'crypto-policies': | ||
| 148 | ····ensure·=>·'installed', | ||
| 149 | ··} | ||
| 150 | 141 | -·name:·Ensure·crypto-policies·is·installed | |
| 142 | ··package: | ||
| 143 | ····name:·crypto-policies | ||
| 144 | ····state:·present | ||
| 145 | ··tags: | ||
| 146 | ··-·CCE-89668-8 | ||
| 147 | ··-·enable_strategy | ||
| 148 | ··-·low_complexity | ||
| 149 | ··-·low_disruption | ||
| 150 | ··-·medium_severity | ||
| 151 | ··-·no_reboot_needed | ||
| 152 | ··-·package_crypto-policies_installed | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 157 | ····dnf·install·-y·"crypto-policies" | ||
| 158 | 158 | package·install·crypto-policies | |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"crypto-policies" | ||
| 162 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | 168 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 169 | ····dnf·install·-y·"crypto-policies" | ||
| 170 | fi | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | dnf·install·crypto-policies | 176 | dnf·install·crypto-policies |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_crypto-policies | ||
| 183 | class·install_crypto-policies·{ | ||
| 184 | ··package·{·'crypto-policies': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 176 | -·name:·Ensure·crypto-policies·is·installed | ||
| 177 | ··package: | ||
| 178 | ····name:·crypto-policies | ||
| 179 | ····state:·present | ||
| 180 | ··tags: | ||
| 181 | ··-·CCE-89668-8 | ||
| 182 | ··-·enable_strategy | ||
| 183 | ··-·low_complexity | ||
| 184 | ··-·low_disruption | ||
| 185 | ··-·medium_severity | ||
| 186 | ··-·no_reboot_needed | ||
| 187 | ··-·package_crypto-policies_installed | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | package· | 193 | package·--add=crypto-policies |
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 212, 58 lines modified | Offset 212, 14 lines modified | ||
| 212 | ·············_\x8i_\x8s_\x8m······1446 | 212 | ·············_\x8i_\x8s_\x8m······1446 |
| 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 217 | ·············_\x8c_\x8i_\x8s······1.6.1 | 217 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | var_system_crypto_policy='FIPS:OSPP' | ||
| 221 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 222 | rc=$? | ||
| 223 | if·test·"$rc"·=·127;·then | ||
| 224 | » echo·"$stderr_of_call"·>&2 | ||
| 225 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 226 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 227 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 228 | » false··#·end·with·an·error·code | ||
| 229 | elif·test·"$rc"·!=·0;·then | ||
| Max diff block lines reached; 914539/922993 bytes (99.08%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20· | 0003b700:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b710:·707 | 0003b710:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b720:·6976 | 0003b720:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b730:·6 | 0003b730:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b740:·65 | 0003b740:·6170·7365·2220·6964·3d22·6964·6d36·3936··apse"·id="idm696 | ||
| 0003b750:·3 | 0003b750:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | ||
| 0003b760:· | 0003b760:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b770:·69 | 0003b770:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b780:·65 | 0003b780:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b790:· | 0003b790:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b7a0:·7 | 0003b7a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b7b0:·3 | 0003b7b0:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b7c0:·7 | 0003b7c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b7d0:· | 0003b7d0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b7e0:· | 0003b7e0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b7f0:·7 | 0003b7f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b800:·7 | 0003b800:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b810:· | 0003b810:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b820:·6 | 0003b820:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b830:·7 | 0003b830:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b840:· | 0003b840:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b850:· | 0003b850:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003b860:· | 0003b860:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003b870:· | 0003b870:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003b880:· | 0003b880:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003b890:· | 0003b890:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003b8a0:· | 0003b8a0:·2043·4345·2d38·3939·3434·2d33·0a20·202d···CCE-89944-3.··- | ||
| 0003b8b0:· | 0003b8b0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b8c0:· | 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b8d0:· | 0003b8d0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b8e0:· | 0003b8e0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b8f0:· | 0003b8f0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b900:· | 0003b900:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b910:· | 0003b910:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b920:· | 0003b920:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b930:· | 0003b930:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b940:· | 0003b940:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b950:· | 0003b950:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b960:·2 | 0003b960:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b970:· | 0003b970:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b980:· | 0003b980:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b990:· | 0003b990:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b9a0:· | 0003b9a0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b9b0:· | 0003b9b0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b9c0:· | 0003b9c0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b9d0:· | 0003b9d0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b9e0:· | 0003b9e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003b9f0:· | 0003b9f0:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003ba00:· | 0003ba00:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003ba10:· | 0003ba10:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003ba20:· | 0003ba20:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003ba30:·6 | 0003ba30:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003ba40:· | 0003ba40:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003ba50:·6 | 0003ba50:·6f6d·6d61·6e64·270a·2020·7365·745f·6661··ommand'.··set_fa | ||
| 0003ba60:· | 0003ba60:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003ba70:·6 | 0003ba70:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003ba80:·6 | 0003ba80:·6c5f·636d·643a·2064·6e66·2072·6569·6e73··l_cmd:·dnf·reins | ||
| 0003ba90:· | 0003ba90:·7461·6c6c·202d·790a·2020·7768·656e·3a0a··tall·-y.··when:. | ||
| 0003baa0:· | 0003baa0:·2020·2d20·6e6f·7420·2820·226b·6572·6e65····-·not·(·"kerne | ||
| 0003bab0:·6 | 0003bab0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | ||
| 0003bac0:·6 | 0003bac0:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003bad0:· | 0003bad0:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | ||
| 0003bae0:· | 0003bae0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003baf0:· | 0003baf0:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | ||
| 0003bb00:· | 0003bb00:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | ||
| 0003bb10:·6 | 0003bb10:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003bb20:· | 0003bb20:·7320·616e·6420·6e6f·7420·226f·7065·6e73··s·and·not·"opens | ||
| 0003bb30:· | 0003bb30:·6869·6674·2d6b·7562·656c·6574·2220·696e··hift-kubelet"·in | ||
| 0003bb40:· | 0003bb40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bb50:·6 | 0003bb50:·6163·6b61·6765·730a·2020·2020·290a·2020··ackages.····).·· | ||
| 0003bb60:· | 0003bb60:·2d20·616e·7369·626c·655f·6469·7374·7269··-·ansible_distri | ||
| 0003bb70:·6 | 0003bb70:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003bb80:·6 | 0003bb80:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003bb90:· | 0003bb90:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003bba0:· | 0003bba0:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003bbb0:· | 0003bbb0:·3a0a·2020·2d20·4343·452d·3839·3934·342d··:.··-·CCE-89944- | ||
| 0003bbc0:· | 0003bbc0:·330a·2020·2d20·434a·4953·2d35·2e31·302e··3.··-·CJIS-5.10. | ||
| 0003bbd0:· | 0003bbd0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bbe0:· | 0003bbe0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003bbf0:· | 0003bbf0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003bc00:·3 | 0003bc00:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003bc10:· | 0003bc10:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003bc20:· | 0003bc20:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003bc30:· | 0003bc30:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bc40:·3 | 0003bc40:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003bc50:· | 0003bc50:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003bc60:· | 0003bc60:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bc70:· | 0003bc70:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003bc80:· | 0003bc80:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003bc90:· | 0003bc90:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003bca0:· | 0003bca0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003bcb0:· | 0003bcb0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003bcc0:· | 0003bcc0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003bcd0:·206 | 0003bcd0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003bce0:·2 | 0003bce0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bcf0:· | 0003bcf0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bd00:· | 0003bd00:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bd10:· | 0003bd10:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bd20:· | 0003bd20:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003bd30:· | 0003bd30:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bd40:· | 0003bd40:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003bd50:· | 0003bd50:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003bd60:· | 0003bd60:·616c·6c20·636f·6d6d·616e·6420·287a·7970··all·command·(zyp | ||
| 0003bd70:· | 0003bd70:·7065·7229·270a·2020·7365·745f·6661·6374··per)'.··set_fact | ||
| 0003bd80:·3 | 0003bd80:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003bd90:· | 0003bd90:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003bda0:· | 0003bda0:·636d·643a·207a·7970·7065·7220·696e·202d··cmd:·zypper·in·- | ||
| 0003bdb0:· | 0003bdb0:·6620·2d79·0a20·2077·6865·6e3a·0a20·202d··f·-y.··when:.··- | ||
| 0003bdc0:· | 0003bdc0:·206e·6f74·2028·2022·6b65·726e·656c·2220···not·(·"kernel"· | ||
| 0003bdd0:· | 0003bdd0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bde0:·2e | 0003bde0:·2e70·6163·6b61·6765·7320·616e·6420·2272··.packages·and·"r | ||
| 0003bdf0:· | 0003bdf0:·706d·2d6f·7374·7265·6522·2069·6e20·616e··pm-ostree"·in·an | ||
| 0003be00:· | 0003be00:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003be10:·6 | 0003be10:·6167·6573·0a20·2020·2061·6e64·2022·626f··ages.····and·"bo | ||
| 0003be20:· | 0003be20:·6f74·6322·2069·6e20·616e·7369·626c·655f··otc"·in·ansible_ | ||
| 0003be30:·6 | 0003be30:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003be40:·6 | 0003be40:·6e64·206e·6f74·2022·6f70·656e·7368·6966··nd·not·"openshif | ||
| 0003be50:·7 | 0003be50:·742d·6b75·6265·6c65·7422·2069·6e20·616e··t-kubelet"·in·an | ||
| 0003be60:·73 | 0003be60:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| Max diff block lines reached; 16562622/16618402 bytes (99.66%) of diff not shown. | |||
| Offset 15128, 281 lines modified | Offset 15128, 281 lines modified | ||
| 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | ||
| 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b1f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b200:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b210:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b220:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b230:·3d22·6964·6d37·3330·3722·3e3c·7461·626c··="idm7307"><tabl | |||
| 0003b240:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b250:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b260:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b270:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b280:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b290:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b2a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b2b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1f0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b200:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b210:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b220:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b230:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b240:·3330·3722·3e3c·7072·653e·3c63·6f64·653e··307"><pre><code> | |||
| 0003b250:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b260:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b270:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b280:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b290:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b2a0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b2b0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b2c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b2d0:·3733·3038·2220·7461·6269·6e64·6578·3d22··7308"·tabindex=" | |||
| 0003b2e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b2f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b300:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b310:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b320:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b330:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b380:·3038·223e·3c74·6162·6c65·2063·6c61·7373··08"><table·class | |||
| 0003b390:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b3c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b3d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b2c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b3f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b400:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b410:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b420:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b430:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b440:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b450:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b460:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b470:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b480:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b490:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b4a0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b4b0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b4c0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b4d0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b4e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b4f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b500:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b510:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b520:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b530:·2223·6964·6d37·3330·3922·2074·6162·696e··"#idm7309"·tabin | |||
| 0003b540:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b550:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b560:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b570:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b580:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b590:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b5a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b5b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5e0:·6d37·3330·3922·3e3c·7461·626c·6520·636c··m7309"><table·cl | |||
| 0003b5f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b600:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b610:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b620:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b630:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b640:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b650:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b660:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b670:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b680:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b690:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b6a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b6b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b6c0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b6d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b6e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b6f0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b700:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b710:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003b720:·6965·7420·2d71·206b·6572·6e65·6c3b·2074··iet·-q·kernel;·t | |||
| 0003b730:·6865·6e0a·0a69·6620·2120·7270·6d20·2d71··hen..if·!·rpm·-q | |||
| 0003b740:·202d·2d71·7569·6574·2022·6169·6465·2220···--quiet·"aide"· | |||
| 0003b750:·3b20·7468·656e·0a20·2020·2064·6e66·2069··;·then.····dnf·i | |||
| 0003b760:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b770:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b780:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b790:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b7a0:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b7b0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b7c0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b7d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b7e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b7f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b800:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b810:·6765·743d·2223·6964·6d37·3331·3022·2074··get="#idm7310"·t | |||
| 0003b820:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b830:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b840:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b850:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b860:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b870:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b880:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| Max diff block lines reached; 33564701/33602127 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 280 lines modified | Offset 15124, 280 lines modified | ||
| 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | ||
| 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b1b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1f0:·6d37·3330·3722·3e3c·7072·653e·3c63·6f64··m7307"><pre><cod | |||
| 0003b200:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b210:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b220:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b230:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b240:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b250:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b260:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b270:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b280:·646d·3733·3038·2220·7461·6269·6e64·6578··dm7308"·tabindex | |||
| 0003b290:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b2d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b2e0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b2f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b300:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b | 0003b1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b320:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b330:·3733·3038·223e·3c74·6162·6c65·2063·6c61··7308"><table·cla | |||
| 0003b340:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b350:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b360:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b370:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b | 0003b1e0:·6964·3d22·6964·6d37·3330·3722·3e3c·7461··id="idm7307"><ta | ||
| 0003b1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b240:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b250:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b260:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b | 0003b270:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b3a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b3b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b3c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b3d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b3e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b400:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b410:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b420:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b430:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b440:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b450:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b460:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b470:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b480:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b4b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b4c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b4d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4e0:·743d·2223·6964·6d37·3330·3922·2074·6162··t="#idm7309"·tab | |||
| 0003b4f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b530:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b540:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b550:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b560:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b570:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b580:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b590:·6964·6d37·3330·3922·3e3c·7461·626c·6520··idm7309"><table· | |||
| 0003b5a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b5b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b5c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b5d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b5e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b610:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b620:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b630:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b640:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b650:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b660:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b670:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b680:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b690:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003b6a0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003b6b0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003b6c0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003b6d0:·7175·6965·7420·2d71·206b·6572·6e65·6c3b··quiet·-q·kernel; | |||
| 0003b6e0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003b6f0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003b700:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003b710:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b720:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003b730:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b740:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b750:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b760:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b770:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b780:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b790:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b7a0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b7b0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b7c0:·6172·6765·743d·2223·6964·6d37·3331·3022··arget="#idm7310" | |||
| 0003b7d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b7e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b7f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b800:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b810:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b820:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b830:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003b840:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b850:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b860:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| Max diff block lines reached; 33434447/33471735 bytes (99.89%) of diff not shown. | |||
| Offset 15247, 284 lines modified | Offset 15247, 284 lines modified | ||
| 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | ||
| 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b950:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b960:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b970:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b980:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b990:·2069·643d·2269·646d·3739·3930·223e·3c74···id="idm7990"><t | |||
| 0003b9a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b9b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b9c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b9d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b9e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b9f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ba00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b950:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b960:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b970:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b980:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b990:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b9a0:·646d·3739·3930·223e·3c70·7265·3e3c·636f··dm7990"><pre><co | |||
| 0003b9b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b9c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b9d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b9e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b9f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ba00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ba10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ba20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ba30:·6964·6d37·3939·3122·2074·6162·696e·6465··idm7991"·tabinde | |||
| 0003ba40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ba50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ba60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ba70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ba80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003ba90:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003baa0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bae0:·6d37·3939·3122·3e3c·7461·626c·6520·636c··m7991"><table·cl | |||
| 0003baf0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bb00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bb10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bb20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bb30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003ba20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003bb50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003ba30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003ba40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003ba50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bb80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bb90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bba0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bbb0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bbc0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bbd0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bbe0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bbf0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bc00:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bc10:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bc20:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b | 0003ba60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003ba70:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ba80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ba90:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003baa0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003bab0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003bac0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003bad0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003bae0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003baf0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bb00:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bb10:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bb20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bb30:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bb40:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bb50:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bb60:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bb70:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bb80:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb90:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bba0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bbb0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bbc0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bbd0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bbe0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003bbf0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bc00:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bc10:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bc20:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003bc30:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003bc40:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003bc50:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003bc60:·6167·733a·0a20·202d·2043·4345·2d38·3038··ags:.··-·CCE-808 | |||
| 0003bc70:·3434·2d34·0a20·202d·2043·4a49·532d·352e··44-4.··-·CJIS-5. | |||
| 0003bc80:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bc90:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003bca0:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003bcb0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bcc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bcd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bce0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bcf0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bd00:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bd10:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bd20:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bd30:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bd40:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bd50:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003bd60:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | ||
| 0003b | 0003bd70:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003bd80:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003bd90:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003bda0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003bdb0:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | ||
| 0003b | 0003bdc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003bdd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b | 0003bde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b | 0003bdf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003be00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003be10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| Max diff block lines reached; 23004265/23042105 bytes (99.84%) of diff not shown. | |||
| Offset 15252, 284 lines modified | Offset 15252, 284 lines modified | ||
| 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | ||
| 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b9a0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b9b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b9e0:·7365·2220·6964·3d22·6964·6d37·3939·3022··se"·id="idm7990" | |||
| 0003b9a0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b9b0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b9c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9f0:·3d22·6964·6d37·3939·3022·3e3c·7072·653e··="idm7990"><pre> | |||
| 0003ba00:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ba10:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ba20:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ba30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b | 0003b9f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003ba00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ba10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ba20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ba30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ba40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ba50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ba60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ba50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba80:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003ba90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003baa0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bab0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bac0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bad0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bae0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003baf0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003bb00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bb10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bb20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bb30:·2269·646d·3739·3931·223e·3c74·6162·6c65··"idm7991"><table | |||
| 0003bb40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bb50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bb60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bb70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bb80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003ba70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003ba80:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003ba90:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003baa0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003bab0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003bac0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | ||
| 0003bbf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bc00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bc10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bc20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bc30:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003bc40:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003bc50:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003bc60:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003bc70:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003bc80:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b | 0003bad0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bae0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003baf0:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003bb00:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003bb10:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003bb20:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003bb30:·6167·733a·0a20·202d·2043·4345·2d38·3038··ags:.··-·CCE-808 | |||
| 0003bb40:·3434·2d34·0a20·202d·2043·4a49·532d·352e··44-4.··-·CJIS-5. | |||
| 0003bb50:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bb60:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003bb70:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003bb80:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bb90:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bba0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbb0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bbc0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bbd0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bbe0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bbf0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bc00:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bc10:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bc20:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bc30:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003bc40:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bc50:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003bc60:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bc70:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bc80:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003bc90:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003bca0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003bcb0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003bcc0:·3830·3834·342d·340a·2020·2d20·434a·4953··80844-4.··-·CJIS | |||
| 0003bcd0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003bce0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003bcf0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003bd00:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003bd10:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bd20:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bd30:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003bd40:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003bd50:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003bd60:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003bd70:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003bd80:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003bd90:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003bda0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bdb0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003bc | 0003bdc0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b | 0003bdd0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b | 0003bde0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b | 0003bdf0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b | 0003be00:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | ||
| 0003b | 0003be10:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003bd00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bd30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd50:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003bd60:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd70:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 23299440/23337280 bytes (99.84%) of diff not shown. | |||
| Offset 15242, 285 lines modified | Offset 15242, 285 lines modified | ||
| 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b900:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b900:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b910:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b920:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b930:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b940:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b950:·3d22·6964·6d37·3939·3022·3e3c·7461·626c··="idm7990"><tabl | |||
| 0003b960:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b970:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b980:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b990:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b9b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b9d0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b910:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b920:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b930:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b940:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b950:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b960:·3939·3022·3e3c·7072·653e·3c63·6f64·653e··990"><pre><code> | |||
| 0003b970:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b980:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b990:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b9a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b9b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b9c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b9d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9f0:·3739·3931·2220·7461·6269·6e64·6578·3d22··7991"·tabindex=" | |||
| 0003ba00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ba10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ba20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ba30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba50:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ba60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba90:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003baa0:·3931·223e·3c74·6162·6c65·2063·6c61·7373··91"><table·class | |||
| 0003bab0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bac0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bad0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bae0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003baf0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b9e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bb10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b9f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003ba00:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003ba10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003ba20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bb50:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bb60:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bb70:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bb80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bb90:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bba0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bbb0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bbc0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bbd0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bbe0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b | 0003ba30:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ba40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba50:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba60:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba70:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba80:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba90:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003baa0:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003bab0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003bac0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003bad0:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003bae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baf0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bb00:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bb10:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bb20:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bb30:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bb40:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb50:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb60:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb80:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb90:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bba0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bbb0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bbc0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bbd0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bbe0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bbf0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bc00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bc10:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bc20:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bc30:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bc40:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bc50:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bc60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc70:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc80:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc90:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bca0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bcb0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bcc0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bcd0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bce0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bcf0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bd00:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bd10:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003bd20:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b | 0003bd30:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003bd40:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b | 0003bd50:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b | 0003bd60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b | 0003bd70:·743d·2223·6964·6d37·3939·3122·2074·6162··t="#idm7991"·tab | ||
| 0003b | 0003bd80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b | 0003bd90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b | 0003bda0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b | 0003bdb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bc | 0003bdc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b | 0003bdd0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| Max diff block lines reached; 9944788/9982766 bytes (99.62%) of diff not shown. | |||
| Offset 131, 60 lines modified | Offset 131, 14 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·rpm·--quiet·-q·kernel;·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····yum·install·-y·"aide" | ||
| 162 | fi | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | dnf·install·aide | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 184 | ··package_facts: | 144 | ··package_facts: |
| Offset 224, 14 lines modified | Offset 178, 60 lines modified | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 229 | package·install·aide | 183 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····yum·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 231 | Run·the·following·command·to·generate·a·new·database: | 225 | Run·the·following·command·to·generate·a·new·database: |
| 232 | $·sudo·/usr/sbin/aide·--init | 226 | $·sudo·/usr/sbin/aide·--init |
| 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 234 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 228 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 235 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 229 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 236 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 230 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 28 lines modified | Offset 259, 14 lines modified | ||
| 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ·············_\x8c_\x8i_\x8s············5.3.1 | 263 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1125658/1130451 bytes (99.58%) of diff not shown. | |||
| Offset 14908, 205 lines modified | Offset 14908, 205 lines modified | ||
| 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | ||
| 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003a420:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003a430:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003a440:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a450:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a460:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a470:·643d·2269·646d·3133·3432·3122·3e3c·7072··d="idm13421"><pr | |||
| 0003a480:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003a4 | 0003a420:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003a430:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003a440:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003a450:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003a460:·7073·6522·2069·643d·2269·646d·3133·3432··pse"·id="idm1342 | |||
| 0003a470:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003a480:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a490:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a4a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a4b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a4c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a4d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a4e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a4f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a500:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a510:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a520:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a530:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a540:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a550:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a560:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003a570:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003a580:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003a590:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003a5a0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003a5b0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003a5c0:·3239·3835·2d33·0a20·202d·2065·6e61·626c··2985-3.··-·enabl | |||
| 0003a5d0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003a5e0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003a5f0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003a600:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003a610:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003a620:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003a630:·636b·6167·655f·646e·662d·6175·746f·6d61··ckage_dnf-automa | |||
| 0003a640:·7469·635f·696e·7374·616c·6c65·640a·0a2d··tic_installed..- | |||
| 0003a650:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a | 0003a660:·662d·6175·746f·6d61·7469·6320·6973·2069··f-automatic·is·i | ||
| 0003a | 0003a670:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | ||
| 0003a680:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a690:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a6a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a6b0:·2077·6865·6e3a·206e·6f74·2028·2022·6b65···when:·not·(·"ke | |||
| 0003a6c0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003a6d0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | |||
| 0003a6e0:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | |||
| 0003a6f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003a700:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | |||
| 0003a710:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | |||
| 0003a720:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003a730:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | |||
| 0003a740:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | |||
| 0003a750:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003a760:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | |||
| 0003a770:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003a780:·2d38·3239·3835·2d33·0a20·202d·2065·6e61··-82985-3.··-·ena | |||
| 0003a790:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003a7a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003a7b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003a7c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003a7d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003a7e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003a7f0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 0003a800:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 0003a810:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003a820:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003a830:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003a840:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003a850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003a860:·3d22·2369·646d·3133·3432·3222·2074·6162··="#idm13422"·tab | |||
| 0003a870:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003a880:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003a890:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003a8a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003a8b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003a8c0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003a8d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003a8e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a8f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a900:·6170·7365·2220·6964·3d22·6964·6d31·3334··apse"·id="idm134 | |||
| 0003a910:·3232·223e·3c74·6162·6c65·2063·6c61·7373··22"><table·class | |||
| 0003a920:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a930:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a940:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a950:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a960:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a970:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a980:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003a990:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003a9a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a9b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003a9c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a9d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a9e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003a9f0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003aa00:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003aa10:·6b61·6765·2069·6e73·7461·6c6c·2064·6e66··kage·install·dnf | |||
| 0003aa20:·2d61·7574·6f6d·6174·6963·0a3c·2f63·6f64··-automatic.</cod | |||
| 0003a | 0003aa30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003a | 0003aa40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003a | 0003aa50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003a | 0003aa60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003a | 0003aa70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a | 0003aa80:·6d31·3334·3233·2220·7461·6269·6e64·6578··m13423"·tabindex | ||
| 0003a | 0003aa90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a | 0003aaa0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a | 0003aab0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a | 0003aac0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a | 0003aad0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a | 0003aae0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003a580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| Max diff block lines reached; 3408660/3435046 bytes (99.23%) of diff not shown. | |||
| Offset 95, 61 lines modified | Offset 95, 14 lines modified | ||
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 103 | [[packages]] | ||
| 104 | name·=·"dnf-automatic" | ||
| 105 | version·=·"*" | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | include·install_dnf-automatic | ||
| 112 | class·install_dnf-automatic·{ | ||
| 113 | ··package·{·'dnf-automatic': | ||
| 114 | ····ensure·=>·'installed', | ||
| 115 | ··} | ||
| 116 | } | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 123 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 124 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 125 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 126 | ····yum·install·-y·"dnf-automatic" | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=dnf-automatic | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | dnf·install·dnf-automatic | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | -·name:·Gather·the·package·facts | 107 | -·name:·Gather·the·package·facts |
| 149 | ··package_facts: | 108 | ··package_facts: |
| Offset 182, 14 lines modified | Offset 135, 61 lines modified | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package·install·dnf-automatic | 140 | package·install·dnf-automatic |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"dnf-automatic" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 152 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 153 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 154 | ····yum·install·-y·"dnf-automatic" | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·dnf-automatic | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_dnf-automatic | ||
| 171 | class·install_dnf-automatic·{ | ||
| 172 | ··package·{·'dnf-automatic': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=dnf-automatic | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 183 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 190 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 184 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 191 | automatic.conf. | 185 | automatic.conf. |
| 192 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 186 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 193 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 187 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 194 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 188 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 200, 56 lines modified | Offset 200, 14 lines modified | ||
| 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 201 | Identifiers:·CCE-82494-6 | 201 | Identifiers:·CCE-82494-6 |
| 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 243213/248403 bytes (97.91%) of diff not shown. | |||
| Offset 15299, 285 lines modified | Offset 15299, 285 lines modified | ||
| 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bc90:·3e52·656d·6564·6961·7469·6f6e·204 | 0003bc90:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003bca0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bcb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bcc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bcd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bce0:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003bcf0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bd00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bd10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bd60:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bca0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003bcb0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bcc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bcd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bce0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bcf0:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003bd00:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003bd10:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003bd20:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003bd30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bd70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bd80:·3939·3122·2074·6162·696e·6465·783d·2230··991"·tabindex="0 | |||
| 0003bd90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bda0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bdb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bdc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bdd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bde0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bdf0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003be00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be20:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003be30:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003be40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003be50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003be60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003be70:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003be80:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003bd70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bea0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003bd80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bd90:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003bda0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bdb0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bee0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bef0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bf00:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bf10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003bdc0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003bdd0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bde0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bdf0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003be00:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003be10:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003be20:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003be30:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003be40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003be50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003be60:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003be70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003be80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bea0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003beb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bec0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bed0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bee0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bef0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bf00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bf10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bf | 0003bf20:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | ||
| 0003bf40:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003bf50:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003bf60:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003bf70:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003bf | 0003bf30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | ||
| 0003bf40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bf50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bf60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bf70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bf80:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bf90:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bfa0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bfb0:·0a20·202d·2043·4345·2d38·3038·3434·2d34··.··-·CCE-80844-4 | |||
| 0003bfc0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfd0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfe0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003 | 0003c0b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003bfa0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bfb0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bfc0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bfe0:·2369·646d·3739·3932·2220·7461·6269·6e64··#idm7992"·tabind | |||
| 0003bff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c040:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003c050:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003c060:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| Max diff block lines reached; 26334481/26372459 bytes (99.86%) of diff not shown. | |||
| Offset 15261, 284 lines modified | Offset 15261, 284 lines modified | ||
| 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | ||
| 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba30:·6469·6174·696f·6e20·4 | 0003ba30:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003ba40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ba50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ba60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ba70:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba80:·3939·3022·3e3c·7461·626c·6520·636c·6173··990"><table·clas | |||
| 0003ba90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003baa0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bab0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bac0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bad0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bae0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003baf0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ba40:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ba50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ba60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ba70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ba80:·2220·6964·3d22·6964·6d37·3939·3022·3e3c··"·id="idm7990">< | |||
| 0003ba90:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003baa0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003bab0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003bac0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003bad0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bae0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003baf0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb00:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb10:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | |||
| 0003bb20:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb30:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb40:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb50:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bb60:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bb70:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bb80:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bb90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bba0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbb0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bbc0:·2069·643d·2269·646d·3739·3931·223e·3c74···id="idm7991"><t | |||
| 0003bbd0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bbe0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bbf0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc00:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc10:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003bb00:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003bb10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bc40:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bc50:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003bb20:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003bb30:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bb40:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b | 0003bb50:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003bc80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc90:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bca0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bcb0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bcc0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bcd0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003bce0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003bcf0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003bd00:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003bd10:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b | 0003bb60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bb70:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bb80:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003bb90:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003bba0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003bbb0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003bbc0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003bbd0:·2d38·3038·3434·2d34·0a20·202d·2043·4a49··-80844-4.··-·CJI | |||
| 0003bbe0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003bbf0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003bc00:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003bc10:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bc20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bc30:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bc40:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bc50:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bc60:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bc70:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bc80:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bc90:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bca0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bcb0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bcc0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003bcd0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bce0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bcf0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bd00:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bd10:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bd20:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bd30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bd40:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bd50:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bd60:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bd70:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bd80:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bd90:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bda0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bdb0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bdc0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bdd0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bde0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bdf0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003be00:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003be10:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003be20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003be30:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003be40:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b | 0003be50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b | 0003be60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b | 0003be70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b | 0003be80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b | 0003be90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b | 0003bea0:·6d37·3939·3122·2074·6162·696e·6465·783d··m7991"·tabindex= | ||
| 0003b | 0003beb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b | 0003bec0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b | 0003bed0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b | 0003bee0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b | 0003bef0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b | 0003bf00:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| Max diff block lines reached; 11643391/11681231 bytes (99.68%) of diff not shown. | |||
| Offset 117, 60 lines modified | Offset 117, 14 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | include·install_aide | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | } | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·rpm·--quiet·-q·kernel;·then | ||
| 146 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 147 | ····yum·install·-y·"aide" | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·--add=aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | dnf·install·aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 170 | ··package_facts: | 130 | ··package_facts: |
| Offset 210, 14 lines modified | Offset 164, 60 lines modified | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 214 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 215 | package·install·aide | 169 | package·install·aide |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·kernel;·then | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 182 | ····yum·install·-y·"aide" | ||
| 183 | fi | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | dnf·install·aide | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | include·install_aide | ||
| 199 | class·install_aide·{ | ||
| 200 | ··package·{·'aide': | ||
| 201 | ····ensure·=>·'installed', | ||
| 202 | ··} | ||
| 203 | } | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | package·--add=aide | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | Run·the·following·command·to·generate·a·new·database: | 211 | Run·the·following·command·to·generate·a·new·database: |
| 218 | $·sudo·/usr/sbin/aide·--init | 212 | $·sudo·/usr/sbin/aide·--init |
| 219 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 220 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 221 | To·initiate·a·manual·check,·run·the·following·command: | 215 | To·initiate·a·manual·check,·run·the·following·command: |
| 222 | $·sudo·/usr/sbin/aide·--check | 216 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 28 lines modified | Offset 238, 14 lines modified | ||
| 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ·············_\x8c_\x8i_\x8s············5.3.1 | 242 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1361520/1366462 bytes (99.64%) of diff not shown. | |||
| Offset 15252, 285 lines modified | Offset 15252, 285 lines modified | ||
| 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b9a0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b9a0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b9b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b9c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9f0:·3d22·6964·6d37·3939·3022·3e3c·7461·626c··="idm7990"><tabl | |||
| 0003ba00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ba10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ba20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ba30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ba40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ba70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b9b0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b9c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b9d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b9e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b9f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba00:·3939·3022·3e3c·7072·653e·3c63·6f64·653e··990"><pre><code> | |||
| 0003ba10:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ba20:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ba30:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ba40:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ba50:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ba60:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ba70:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ba80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ba90:·3739·3931·2220·7461·6269·6e64·6578·3d22··7991"·tabindex=" | |||
| 0003baa0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bab0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bac0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bad0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bae0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003baf0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003bb00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bb10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bb20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bb30:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bb40:·3931·223e·3c74·6162·6c65·2063·6c61·7373··91"><table·class | |||
| 0003bb50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bb60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bb70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bb80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bb90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003ba80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bbb0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003ba90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003baa0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003bab0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003bac0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bbf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bc00:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bc10:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bc20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bc30:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bc40:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bc50:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bc60:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bc70:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bc80:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b | 0003bad0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003bae0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003baf0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003bb00:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003bb10:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003bb20:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003bb30:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003bb40:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003bb50:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003bb60:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003bb70:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003bb80:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bb90:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bba0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bbb0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bbc0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bbd0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bbe0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bbf0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bc00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bc10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bc20:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bc30:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bc40:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bc50:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bc60:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bc70:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bc80:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bc90:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bca0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bcb0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bcc0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bcd0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bce0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bcf0:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bd00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bd10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bd20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bd30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bd40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bd50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bd60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bd70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bd80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bd90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bda0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bdb0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bca | 0003bdc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b | 0003bdd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003bde0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003bcd0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bce0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bcf0:·2223·6964·6d37·3939·3222·2074·6162·696e··"#idm7992"·tabin | |||
| 0003bd00:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd10:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd20:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd30:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bd40:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bd50:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| Max diff block lines reached; 11332504/11370482 bytes (99.67%) of diff not shown. | |||
| Offset 116, 60 lines modified | Offset 116, 14 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·rpm·--quiet·-q·kernel;·then | ||
| 145 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 146 | ····yum·install·-y·"aide" | ||
| 147 | fi | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | dnf·install·aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 169 | ··package_facts: | 129 | ··package_facts: |
| Offset 209, 14 lines modified | Offset 163, 60 lines modified | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | package·install·aide | 168 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····yum·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | Run·the·following·command·to·generate·a·new·database: | 210 | Run·the·following·command·to·generate·a·new·database: |
| 217 | $·sudo·/usr/sbin/aide·--init | 211 | $·sudo·/usr/sbin/aide·--init |
| 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 219 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 220 | To·initiate·a·manual·check,·run·the·following·command: | 214 | To·initiate·a·manual·check,·run·the·following·command: |
| 221 | $·sudo·/usr/sbin/aide·--check | 215 | $·sudo·/usr/sbin/aide·--check |
| Offset 237, 28 lines modified | Offset 237, 14 lines modified | ||
| 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 241 | ·············_\x8c_\x8i_\x8s············5.3.1 | 241 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1322099/1327041 bytes (99.63%) of diff not shown. | |||
| Offset 15291, 284 lines modified | Offset 15291, 284 lines modified | ||
| 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | ||
| 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bc10:·6961·7469·6f6e·204 | 0003bc10:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003bc20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bc30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bc40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bc50:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bc60:·3930·223e·3c74·6162·6c65·2063·6c61·7373··90"><table·class | |||
| 0003bc70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bc80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bc90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bca0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bcb0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bcc0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bcd0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bc20:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003bc30:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bc40:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bc50:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bc60:·2069·643d·2269·646d·3739·3930·223e·3c70···id="idm7990"><p | |||
| 0003bc70:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003bc80:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003bc90:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003bca0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003bcb0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bcc0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bcd0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bce0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bcf0:·6765·743d·2223·6964·6d37·3939·3122·2074··get="#idm7991"·t | |||
| 0003bd00:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bd10:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bd20:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bd30:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bd40:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bd50:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bd60:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003bd70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bda0:·6964·3d22·6964·6d37·3939·3122·3e3c·7461··id="idm7991"><ta | |||
| 0003bdb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bdc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bdd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bde0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bdf0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003bce0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003bcf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003be20:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003be30:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003bd00:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bd10:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bd20:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b | 0003bd30:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 0003bd40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bd60:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003bd70:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003bd80:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003bd90:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003bda0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003bdb0:·3830·3834·342d·340a·2020·2d20·434a·4953··80844-4.··-·CJIS | |||
| 0003bdc0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003bdd0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003bde0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003bdf0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003be00:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003be10:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003be20:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003be30:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003be40:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003be50:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003be60:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003be70:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003be80:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003be90:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bea0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003beb0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003bec0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003bed0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003bee0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003bef0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003bf00:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003bf10:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003bf20:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003bf30:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003bf40:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bf50:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bf60:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003bf70:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bf80:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003bf90:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003bfa0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003bfb0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003bfc0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003bfd0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003bfe0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003bff0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c000:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c010:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c020:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003be60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003be70:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003be80:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003be90:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bea0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003beb0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003bec0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003bed0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003bee0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003bef0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003bf00:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003bf10:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bf20:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bf30:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bf40:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bf50:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bf60:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | |||
| 0003bf70:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf80:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf90:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bfa0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bfb0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| Max diff block lines reached; 26124681/26162521 bytes (99.86%) of diff not shown. | |||
| Offset 15283, 284 lines modified | Offset 15283, 284 lines modified | ||
| 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | ||
| 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bb90:·6564·6961·7469·6f6e·204 | 0003bb90:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003bba0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bbb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bbc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bbd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bbe0:·3739·3930·223e·3c74·6162·6c65·2063·6c61··7990"><table·cla | |||
| 0003bbf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bc00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bc20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bc30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bc40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bc50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bba0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003bbb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bbc0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bbd0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bbe0:·6522·2069·643d·2269·646d·3739·3930·223e··e"·id="idm7990"> | |||
| 0003bbf0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003bc00:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003bc10:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bc20:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003bc30:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bc40:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bc50:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bc60:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bc70:·6172·6765·743d·2223·6964·6d37·3939·3122··arget="#idm7991" | |||
| 0003bc80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bc90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bca0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bcb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bcc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bcd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bce0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003bcf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bd00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd20:·2220·6964·3d22·6964·6d37·3939·3122·3e3c··"·id="idm7991">< | |||
| 0003bd30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bd40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bd50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bd60:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bd70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003bc60:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003bc70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bda0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bdb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003bc80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bc90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bca0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003bcb0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003bde0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bdf0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003be00:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003be10:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003be20:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003be30:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003be40:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003be50:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003be60:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003be70:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b | 0003bcc0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003bcd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bce0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003bcf0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003bd00:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003bd10:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003bd20:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003bd30:·452d·3830·3834·342d·340a·2020·2d20·434a··E-80844-4.··-·CJ | |||
| 0003bd40:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003bd50:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003bd60:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003bd70:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003bd80:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003bd90:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003bda0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003bdb0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003bdc0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003bdd0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003bde0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003bdf0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003be00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003be10:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003be20:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003be30:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003be40:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003be50:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003be60:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003be70:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003be80:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003be90:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003bea0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003beb0:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bec0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bed0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bee0:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bef0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bf00:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bf10:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bf20:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bf30:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bf40:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bf50:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bf60:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bf70:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bf80:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bf90:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bfa0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003bfb0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003bfc0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003bfd0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003bfe0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003bff0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003bee0:·3739·3932·2220·7461·6269·6e64·6578·3d22··7992"·tabindex=" | |||
| 0003bef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf40:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| Max diff block lines reached; 10102189/10140029 bytes (99.63%) of diff not shown. | |||
| Offset 122, 60 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····yum·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 175 | ··package_facts: | 135 | ··package_facts: |
| Offset 215, 14 lines modified | Offset 169, 60 lines modified | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 220 | package·install·aide | 174 | package·install·aide |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 185 | if·rpm·--quiet·-q·kernel;·then | ||
| 186 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 187 | ····yum·install·-y·"aide" | ||
| 188 | fi | ||
| 189 | else | ||
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 191 | fi | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | dnf·install·aide | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | include·install_aide | ||
| 204 | class·install_aide·{ | ||
| 205 | ··package·{·'aide': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | package·--add=aide | ||
| 221 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 215 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 222 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 216 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 223 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 217 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 224 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 218 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 290, 110 lines modified | Offset 290, 90 lines modified | ||
| 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 291 | Severity: ···medium | 291 | Severity: ···medium |
| 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 293 | Identifiers:·CCE-82723-8 | 293 | Identifiers:·CCE-82723-8 |
| 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1342354/1348005 bytes (99.58%) of diff not shown. | |||
| Offset 15318, 414 lines modified | Offset 15318, 414 lines modified | ||
| 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | ||
| 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bdc0:·6e20· | 0003bdc0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003bdd0:·87b2 | 0003bdd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003bde0:·6c61 | 0003bde0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003bdf0:·6 | 0003bdf0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003be00:·643d | 0003be00:·2220·6964·3d22·6964·6d37·3634·3722·3e3c··"·id="idm7647">< | ||
| 0003be10:· | 0003be10:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003be20:· | 0003be20:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003be30:· | 0003be30:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003be40:· | 0003be40:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003be50:· | 0003be50:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003be60:· | 0003be60:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003be70:·6 | 0003be70:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003be80:· | 0003be80:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003be90:·7 | 0003be90:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003bea0:·6 | 0003bea0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003beb0:· | 0003beb0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bec0:·6 | 0003bec0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bed0:· | 0003bed0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bee0:· | 0003bee0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003bef0:· | 0003bef0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bf00:· | 0003bf00:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003bf10:·6 | 0003bf10:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003bf20:· | 0003bf20:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bf30:· | 0003bf30:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bf40:· | 0003bf40:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bf50:· | 0003bf50:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 0003bf60:· | 0003bf60:·2d38·3038·3537·2d36·0a20·202d·2043·4a49··-80857-6.··-·CJI | ||
| 0003bf70:· | 0003bf70:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003bf80:· | 0003bf80:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bf90:· | 0003bf90:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bfa0:· | 0003bfa0:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bfb0:· | 0003bfb0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bfc0:· | 0003bfc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bfd0:· | 0003bfd0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bfe0:· | 0003bfe0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bff0:· | 0003bff0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c000:· | 0003c000:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c010:· | 0003c010:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c020:· | 0003c020:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c030:· | 0003c030:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c040:· | 0003c040:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c050:· | 0003c050:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c060:· | 0003c060:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c070:·70 | 0003c070:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c080:· | 0003c080:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c090:· | 0003c090:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c0a0:·6 | 0003c0a0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c0b0:· | 0003c0b0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c0c0:· | 0003c0c0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c0d0:·6 | 0003c0d0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c0e0:· | 0003c0e0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003c0f0:·20 | 0003c0f0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003c100:·2 | 0003c100:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003c110:· | 0003c110:·6e64·270a·2020·7365·745f·6661·6374·3a0a··nd'.··set_fact:. | ||
| 0003c120:· | 0003c120:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003c130:·6 | 0003c130:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003c140:· | 0003c140:·643a·2079·756d·2072·6569·6e73·7461·6c6c··d:·yum·reinstall | ||
| 0003c150:· | 0003c150:·202d·790a·2020·7768·656e·3a0a·2020·2d20···-y.··when:.··-· | ||
| 0003c160:· | 0003c160:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | ||
| 0003c170:· | 0003c170:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c180:· | 0003c180:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | ||
| 0003c190:·6 | 0003c190:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | ||
| 0003c1a0:· | 0003c1a0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c1b0:·6 | 0003c1b0:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | ||
| 0003c1c0:· | 0003c1c0:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | ||
| 0003c1d0:· | 0003c1d0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003c1e0:·6 | 0003c1e0:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | ||
| 0003c1f0:· | 0003c1f0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | ||
| 0003c200:·6 | 0003c200:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003c210:·6 | 0003c210:·6765·730a·2020·2020·290a·2020·2d20·616e··ges.····).··-·an | ||
| 0003c220:·69 | 0003c220:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003c230:·6 | 0003c230:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003c240:· | 0003c240:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003c250:· | 0003c250:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003c260:· | 0003c260:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003c270:· | 0003c270:·2d20·4343·452d·3830·3835·372d·360a·2020··-·CCE-80857-6.·· | ||
| 0003c280:·2 | 0003c280:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003c290:·2 | 0003c290:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003c2a0:· | 0003c2a0:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003c2b0:· | 0003c2b0:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003c2c0:· | 0003c2c0:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003c2d0:·2 | 0003c2d0:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003c2e0:· | 0003c2e0:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003c2f0:· | 0003c2f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c300:· | 0003c300:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003c310:· | 0003c310:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003c320:· | 0003c320:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003c330:· | 0003c330:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003c340:· | 0003c340:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c350:· | 0003c350:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c360:·20 | 0003c360:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c370:·2 | 0003c370:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c380:· | 0003c380:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c390:·6 | 0003c390:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c3a0:· | 0003c3a0:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c3b0:· | 0003c3b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c3c0:· | 0003c3c0:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003c3d0:· | 0003c3d0:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003c3e0:· | 0003c3e0:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003c3f0:· | 0003c3f0:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003c400:· | 0003c400:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003c410:· | 0003c410:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003c420:· | 0003c420:·636f·6d6d·616e·6420·287a·7970·7065·7229··command·(zypper) | ||
| 0003c430:·2 | 0003c430:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003c440:· | 0003c440:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003c450:· | 0003c450:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003c460:·20 | 0003c460:·207a·7970·7065·7220·696e·202d·6620·2d79···zypper·in·-f·-y | ||
| 0003c470:· | 0003c470:·0a20·2077·6865·6e3a·0a20·202d·206e·6f74··.··when:.··-·not | ||
| 0003c480:· | 0003c480:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | ||
| 0003c490:· | 0003c490:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c4a0:· | 0003c4a0:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | ||
| 0003c4b0:·7 | 0003c4b0:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | ||
| 0003c4c0:· | 0003c4c0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003c4d0:· | 0003c4d0:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | ||
| 0003c4e0:·206 | 0003c4e0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c4f0:· | 0003c4f0:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | ||
| 0003c500:·74 | 0003c500:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | ||
| 0003c510:· | 0003c510:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | ||
| 0003c520:· | 0003c520:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| Max diff block lines reached; 6784941/6840721 bytes (99.18%) of diff not shown. | |||
| Offset 115, 33 lines modified | Offset 115, 14 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 124 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 125 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 126 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 127 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 128 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 129 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 130 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 131 | fi | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 141 | ··package_facts: | 128 | ··package_facts: |
| Offset 314, 14 lines modified | Offset 295, 33 lines modified | ||
| 314 | ··-·PCI-DSSv4-11.5.2 | 295 | ··-·PCI-DSSv4-11.5.2 |
| 315 | ··-·high_complexity | 296 | ··-·high_complexity |
| 316 | ··-·high_severity | 297 | ··-·high_severity |
| 317 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 318 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 319 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 320 | ··-·rpm_verify_hashes | 301 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 324 | run·the·following·command·to·determine·which·package·owns·it: | 318 | run·the·following·command·to·determine·which·package·owns·it: |
| 325 | $·rpm·-qf·FILENAME | 319 | $·rpm·-qf·FILENAME |
| 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 327 | $·sudo·rpm·--restore·PACKAGENAME | 321 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 341, 46 lines modified | Offset 341, 14 lines modified | ||
| 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 353 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 354 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 355 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 356 | declare·-A·SETPERMS_RPM_DICT | ||
| 357 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 358 | #·is·expected·by·the·RPM·database | ||
| 359 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 360 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 361 | do | ||
| 362 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 363 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 364 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 380 | -·name:·Gather·the·package·facts | 353 | -·name:·Gather·the·package·facts |
| 381 | ··package_facts: | 354 | ··package_facts: |
| Offset 492, 14 lines modified | Offset 460, 46 lines modified | ||
| 492 | ··-·PCI-DSSv4-11.5.2 | 460 | ··-·PCI-DSSv4-11.5.2 |
| 493 | ··-·high_complexity | 461 | ··-·high_complexity |
| 494 | ··-·high_severity | 462 | ··-·high_severity |
| 495 | ··-·medium_disruption | 463 | ··-·medium_disruption |
| 496 | ··-·no_reboot_needed | 464 | ··-·no_reboot_needed |
| 497 | ··-·restrict_strategy | 465 | ··-·restrict_strategy |
| 498 | ··-·rpm_verify_ownership | 466 | ··-·rpm_verify_ownership |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 751017/758742 bytes (98.98%) of diff not shown. | |||
| Offset 15344, 414 lines modified | Offset 15344, 414 lines modified | ||
| 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | ||
| 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bf60:·696f·6e20· | 0003bf60:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003bf70:·20e2 | 0003bf70:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003bf80:·2063 | 0003bf80:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003bf90:·6 | 0003bf90:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003bfa0:·2069 | 0003bfa0:·7365·2220·6964·3d22·6964·6d37·3634·3722··se"·id="idm7647" | ||
| 0003bfb0:· | 0003bfb0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003bfc0:·6 | 0003bfc0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003bfd0:·6 | 0003bfd0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003bfe0:· | 0003bfe0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003bff0:·6 | 0003bff0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c000:·6 | 0003c000:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003c010:· | 0003c010:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003c020:· | 0003c020:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c030:· | 0003c030:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003c040:·2 | 0003c040:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c050:· | 0003c050:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003c060:· | 0003c060:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003c070:· | 0003c070:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003c080:· | 0003c080:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003c090:· | 0003c090:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003c0a0:·6 | 0003c0a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003c0b0:· | 0003c0b0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003c0c0:· | 0003c0c0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003c0d0:·20 | 0003c0d0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003c0e0:· | 0003c0e0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003c0f0:· | 0003c0f0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003c100:· | 0003c100:·4345·2d38·3038·3537·2d36·0a20·202d·2043··CE-80857-6.··-·C | ||
| 0003c110:· | 0003c110:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003c120:· | 0003c120:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c130:· | 0003c130:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003c140:· | 0003c140:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003c150:· | 0003c150:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003c160:· | 0003c160:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003c170:· | 0003c170:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003c180:· | 0003c180:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c190:· | 0003c190:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003c1a0:· | 0003c1a0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003c1b0:· | 0003c1b0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003c1c0:· | 0003c1c0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c1d0:· | 0003c1d0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003c1e0:· | 0003c1e0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003c1f0:· | 0003c1f0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003c200:· | 0003c200:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003c210:· | 0003c210:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003c220:·6 | 0003c220:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003c230:·7 | 0003c230:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003c240:·6e6 | 0003c240:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003c250:· | 0003c250:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003c260:· | 0003c260:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003c270:· | 0003c270:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003c280:· | 0003c280:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003c290:· | 0003c290:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003c2a0:·2 | 0003c2a0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003c2b0:·6 | 0003c2b0:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003c2c0:· | 0003c2c0:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003c2d0:· | 0003c2d0:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003c2e0:·6 | 0003c2e0:·636d·643a·2079·756d·2072·6569·6e73·7461··cmd:·yum·reinsta | ||
| 0003c2f0:· | 0003c2f0:·6c6c·202d·790a·2020·7768·656e·3a0a·2020··ll·-y.··when:.·· | ||
| 0003c300:· | 0003c300:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003c310:· | 0003c310:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c320:· | 0003c320:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003c330:· | 0003c330:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003c340:· | 0003c340:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c350:· | 0003c350:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003c360:·6 | 0003c360:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003c370:· | 0003c370:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003c380:·61 | 0003c380:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003c390:· | 0003c390:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003c3a0:· | 0003c3a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c3b0:· | 0003c3b0:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003c3c0:· | 0003c3c0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003c3d0:· | 0003c3d0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003c3e0:· | 0003c3e0:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003c3f0:· | 0003c3f0:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003c400:· | 0003c400:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003c410:· | 0003c410:·2020·2d20·4343·452d·3830·3835·372d·360a····-·CCE-80857-6. | ||
| 0003c420:· | 0003c420:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003c430:· | 0003c430:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003c440:· | 0003c440:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003c450:· | 0003c450:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003c460:· | 0003c460:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c470:· | 0003c470:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003c480:· | 0003c480:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003c490:· | 0003c490:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c4a0:· | 0003c4a0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003c4b0:· | 0003c4b0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003c4c0:· | 0003c4c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c4d0:· | 0003c4d0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003c4e0:· | 0003c4e0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003c4f0:·2 | 0003c4f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003c500:· | 0003c500:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003c510:· | 0003c510:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003c520:· | 0003c520:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003c530:· | 0003c530:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003c540:· | 0003c540:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003c550:· | 0003c550:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003c560:· | 0003c560:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003c570:· | 0003c570:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003c580:· | 0003c580:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003c590:· | 0003c590:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003c5a0:· | 0003c5a0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003c5b0:· | 0003c5b0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003c5c0:· | 0003c5c0:·6c20·636f·6d6d·616e·6420·287a·7970·7065··l·command·(zyppe | ||
| 0003c5d0:· | 0003c5d0:·7229·270a·2020·7365·745f·6661·6374·3a0a··r)'.··set_fact:. | ||
| 0003c5e0:·2 | 0003c5e0:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003c5f0:· | 0003c5f0:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003c600:· | 0003c600:·643a·207a·7970·7065·7220·696e·202d·6620··d:·zypper·in·-f· | ||
| 0003c610:·2d | 0003c610:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003c620:· | 0003c620:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003c630:·2 | 0003c630:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003c640:· | 0003c640:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003c650:· | 0003c650:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003c660:· | 0003c660:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c670:·6 | 0003c670:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003c680:· | 0003c680:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003c690:·6 | 0003c690:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003c6a0:· | 0003c6a0:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003c6b0:·6 | 0003c6b0:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003c6c0:· | 0003c6c0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| Max diff block lines reached; 17463841/17519621 bytes (99.68%) of diff not shown. | |||
| Offset 121, 33 lines modified | Offset 121, 14 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 134 | ··package_facts: |
| Offset 320, 14 lines modified | Offset 301, 33 lines modified | ||
| 320 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 321 | ··-·high_complexity | 302 | ··-·high_complexity |
| 322 | ··-·high_severity | 303 | ··-·high_severity |
| 323 | ··-·medium_disruption | 304 | ··-·medium_disruption |
| 324 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 325 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 326 | ··-·rpm_verify_hashes | 307 | ··-·rpm_verify_hashes |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 310 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 311 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 312 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 313 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 314 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 315 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 316 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 317 | fi | ||
| 318 | else | ||
| 319 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 320 | fi | ||
| 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 328 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 322 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 329 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 323 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 330 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 324 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 331 | $·rpm·-qf·FILENAME | 325 | $·rpm·-qf·FILENAME |
| 332 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 349, 50 lines modified | Offset 349, 14 lines modified | ||
| 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 361 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 362 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 363 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 364 | declare·-A·SETPERMS_RPM_DICT | ||
| 365 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 366 | #·is·expected·by·the·RPM·database | ||
| 367 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 368 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 369 | do | ||
| 370 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 371 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 372 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 373 | ········do | ||
| 374 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 375 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 376 | ········done | ||
| 377 | done | ||
| 378 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 379 | #·correct·values | ||
| 380 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 381 | do | ||
| 382 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 383 | done | ||
| 384 | else | ||
| 385 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 386 | fi | ||
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 392 | -·name:·Gather·the·package·facts | 361 | -·name:·Gather·the·package·facts |
| 393 | ··package_facts: | 362 | ··package_facts: |
| Offset 508, 14 lines modified | Offset 472, 50 lines modified | ||
| 508 | ··-·PCI-DSSv4-11.5.2 | 472 | ··-·PCI-DSSv4-11.5.2 |
| 509 | ··-·high_complexity | 473 | ··-·high_complexity |
| 510 | ··-·high_severity | 474 | ··-·high_severity |
| 511 | ··-·medium_disruption | 475 | ··-·medium_disruption |
| 512 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 513 | ··-·restrict_strategy | 477 | ··-·restrict_strategy |
| 514 | ··-·rpm_verify_permissions | 478 | ··-·rpm_verify_permissions |
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1328343/1336441 bytes (99.39%) of diff not shown. | |||
| Offset 15352, 414 lines modified | Offset 15352, 414 lines modified | ||
| 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | ||
| 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bfe0:·6961·7469·6f6e·20 | 0003bfe0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003bff0:·6970·7420 | 0003bff0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003c000:·6469 | 0003c000:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c010:· | 0003c010:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c020:·7365 | 0003c020:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0003c030:·3 | 0003c030:·3437·223e·3c74·6162·6c65·2063·6c61·7373··47"><table·class | ||
| 0003c040:· | 0003c040:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003c050:· | 0003c050:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003c060:·6 | 0003c060:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003c070:· | 0003c070:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003c080:· | 0003c080:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003c090:· | 0003c090:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003c0a0:· | 0003c0a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003c0b0:· | 0003c0b0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003c0c0:· | 0003c0c0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003c0d0:· | 0003c0d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003c0e0:·3 | 0003c0e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003c0f0:· | 0003c0f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003c100:· | 0003c100:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003c110:· | 0003c110:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003c120:·2 | 0003c120:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003c130:· | 0003c130:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003c140:·20 | 0003c140:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003c150:·74 | 0003c150:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003c160:· | 0003c160:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003c170:· | 0003c170:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003c180:· | 0003c180:·2d20·4343·452d·3830·3835·372d·360a·2020··-·CCE-80857-6.·· | ||
| 0003c190:· | 0003c190:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003c1a0:· | 0003c1a0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003c1b0:· | 0003c1b0:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003c1c0:· | 0003c1c0:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003c1d0:·2d | 0003c1d0:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003c1e0:·2 | 0003c1e0:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003c1f0:·0 | 0003c1f0:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003c200:· | 0003c200:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c210:· | 0003c210:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003c220:· | 0003c220:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003c230:· | 0003c230:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003c240:· | 0003c240:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003c250:· | 0003c250:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c260:· | 0003c260:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c270:·20 | 0003c270:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c280:· | 0003c280:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c290:· | 0003c290:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c2a0:· | 0003c2a0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c2b0:·6 | 0003c2b0:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c2c0:· | 0003c2c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c2d0:· | 0003c2d0:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003c2e0:· | 0003c2e0:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003c2f0:· | 0003c2f0:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003c300:· | 0003c300:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| 0003c310:·6 | 0003c310:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003c320:· | 0003c320:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003c330:·6 | 0003c330:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003c340:·6 | 0003c340:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003c350:· | 0003c350:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003c360:· | 0003c360:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003c370:· | 0003c370:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003c380:· | 0003c380:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003c390:· | 0003c390:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003c3a0:·6 | 0003c3a0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003c3b0:·6 | 0003c3b0:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003c3c0:· | 0003c3c0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c3d0:· | 0003c3d0:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003c3e0:·20 | 0003c3e0:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003c3f0:·6 | 0003c3f0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c400:· | 0003c400:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003c410:· | 0003c410:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003c420:·6 | 0003c420:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003c430:·7 | 0003c430:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003c440:· | 0003c440:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| 0003c450:·6 | 0003c450:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003c460:·6 | 0003c460:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003c470:· | 0003c470:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003c480:· | 0003c480:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003c490:·7 | 0003c490:·733a·0a20·202d·2043·4345·2d38·3038·3537··s:.··-·CCE-80857 | ||
| 0003c4a0:· | 0003c4a0:·2d36·0a20·202d·2043·4a49·532d·352e·3130··-6.··-·CJIS-5.10 | ||
| 0003c4b0:· | 0003c4b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c4c0:· | 0003c4c0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003c4d0:· | 0003c4d0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003c4e0:· | 0003c4e0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003c4f0:· | 0003c4f0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003c500:· | 0003c500:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c510:· | 0003c510:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003c520:·3 | 0003c520:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003c530:· | 0003c530:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003c540:· | 0003c540:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c550:· | 0003c550:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003c560:· | 0003c560:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003c570:· | 0003c570:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003c580:· | 0003c580:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003c590:·63 | 0003c590:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003c5a0:·6 | 0003c5a0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003c5b0:· | 0003c5b0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003c5c0:·202 | 0003c5c0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003c5d0:· | 0003c5d0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003c5e0:· | 0003c5e0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003c5f0:· | 0003c5f0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003c600:· | 0003c600:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003c610:· | 0003c610:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003c620:· | 0003c620:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003c630:· | 0003c630:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003c640:· | 0003c640:·7461·6c6c·2063·6f6d·6d61·6e64·2028·7a79··tall·command·(zy | ||
| 0003c650:· | 0003c650:·7070·6572·2927·0a20·2073·6574·5f66·6163··pper)'.··set_fac | ||
| 0003c660:· | 0003c660:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003c670:· | 0003c670:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003c680:· | 0003c680:·5f63·6d64·3a20·7a79·7070·6572·2069·6e20··_cmd:·zypper·in· | ||
| 0003c690:·2d | 0003c690:·2d66·202d·790a·2020·7768·656e·3a0a·2020··-f·-y.··when:.·· | ||
| 0003c6a0:· | 0003c6a0:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003c6b0:· | 0003c6b0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003c6c0:· | 0003c6c0:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003c6d0:· | 0003c6d0:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003c6e0:·6 | 0003c6e0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003c6f0:·6 | 0003c6f0:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003c700:·6 | 0003c700:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003c710:· | 0003c710:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003c720:·6 | 0003c720:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003c730:· | 0003c730:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003c740:·6 | 0003c740:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| Max diff block lines reached; 10178711/10234491 bytes (99.45%) of diff not shown. | |||
| Offset 122, 33 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 132 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 133 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 134 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 135 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 136 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 137 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 147 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 135 | ··package_facts: |
| Offset 321, 14 lines modified | Offset 302, 33 lines modified | ||
| 321 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 322 | ··-·high_complexity | 303 | ··-·high_complexity |
| 323 | ··-·high_severity | 304 | ··-·high_severity |
| 324 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 325 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 326 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 327 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 331 | run·the·following·command·to·determine·which·package·owns·it: | 325 | run·the·following·command·to·determine·which·package·owns·it: |
| 332 | $·rpm·-qf·FILENAME | 326 | $·rpm·-qf·FILENAME |
| 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 334 | $·sudo·rpm·--restore·PACKAGENAME | 328 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 348, 46 lines modified | Offset 348, 14 lines modified | ||
| 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 362 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 363 | declare·-A·SETPERMS_RPM_DICT | ||
| 364 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 365 | #·is·expected·by·the·RPM·database | ||
| 366 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 367 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 368 | do | ||
| 369 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 370 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 371 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 372 | done | ||
| 373 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 374 | #·correct·values | ||
| 375 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 376 | do | ||
| 377 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 378 | done | ||
| 379 | else | ||
| 380 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 381 | fi | ||
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 387 | -·name:·Gather·the·package·facts | 360 | -·name:·Gather·the·package·facts |
| 388 | ··package_facts: | 361 | ··package_facts: |
| Offset 499, 14 lines modified | Offset 467, 46 lines modified | ||
| 499 | ··-·PCI-DSSv4-11.5.2 | 467 | ··-·PCI-DSSv4-11.5.2 |
| 500 | ··-·high_complexity | 468 | ··-·high_complexity |
| 501 | ··-·high_severity | 469 | ··-·high_severity |
| 502 | ··-·medium_disruption | 470 | ··-·medium_disruption |
| 503 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 504 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 505 | ··-·rpm_verify_ownership | 473 | ··-·rpm_verify_ownership |
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1056394/1064119 bytes (99.27%) of diff not shown. | |||
| Offset 15256, 285 lines modified | Offset 15256, 285 lines modified | ||
| 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b9e0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b9e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b9f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003ba00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ba10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba30:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003ba40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003baa0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b9f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003ba00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba30:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003ba40:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003ba50:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ba60:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ba70:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ba80:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ba90:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003baa0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bab0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bac0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bad0:·3939·3122·2074·6162·696e·6465·783d·2230··991"·tabindex="0 | |||
| 0003bae0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003baf0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bb00:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bb10:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bb20:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bb30:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bb40:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bb50:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bb60:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bb70:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003bb80:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bb90:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bba0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bbb0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bbc0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003bab0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003bac0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bbf0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003bad0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bae0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003baf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bb00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bc30:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bc40:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bc50:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bc60:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003bb10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003bb20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb30:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bb40:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003bb50:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003bb60:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003bb70:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003bb80:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003bb90:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bba0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bbb0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003bbc0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bbd0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bbe0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bbf0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bc00:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bc10:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bc20:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bc30:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bc40:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bc50:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bc60:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bc70:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bc80:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bc90:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bca0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bcb0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bcc0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bcd0:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bce0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bcf0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bd00:·0a20·202d·2043·4345·2d38·3038·3434·2d34··.··-·CCE-80844-4 | |||
| 0003bd10:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bd20:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bd30:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bd40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bd50:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003bd60:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003bd70:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003bd80:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003bd90:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003bda0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003bdb0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003bdc0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003bdd0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003bde0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003bdf0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003be00:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003be10:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003be20:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003be30:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003be40:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003be50:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003be60:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003be70:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003be80:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003be90:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bea0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003beb0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003bec0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bed0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bee0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bef0:·7073·6522·2069·643d·2269·646d·3739·3931··pse"·id="idm7991 | |||
| 0003bf00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bf20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| Max diff block lines reached; 10103664/10141642 bytes (99.63%) of diff not shown. | |||
| Offset 114, 60 lines modified | Offset 114, 14 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel;·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····yum·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | dnf·install·aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 167 | ··package_facts: | 127 | ··package_facts: |
| Offset 207, 14 lines modified | Offset 161, 60 lines modified | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 212 | package·install·aide | 166 | package·install·aide |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····yum·install·-y·"aide" | ||
| 180 | fi | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | dnf·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | include·install_aide | ||
| 196 | class·install_aide·{ | ||
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 213 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 207 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 214 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 208 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 215 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 209 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 216 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 210 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 282, 110 lines modified | Offset 282, 90 lines modified | ||
| 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 283 | Severity: ···medium | 283 | Severity: ···medium |
| 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 285 | Identifiers:·CCE-82723-8 | 285 | Identifiers:·CCE-82723-8 |
| 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1342373/1348024 bytes (99.58%) of diff not shown. | |||
| Offset 15345, 414 lines modified | Offset 15345, 414 lines modified | ||
| 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | ||
| 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bf70:·20 | 0003bf70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003bf80:·b23c | 0003bf80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bf90:·6173 | 0003bf90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bfa0:·7073 | 0003bfa0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bfb0:·3d | 0003bfb0:·2069·643d·2269·646d·3736·3437·223e·3c74···id="idm7647"><t | ||
| 0003bfc0:· | 0003bfc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bfd0:·6 | 0003bfd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bfe0:· | 0003bfe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bff0:·6 | 0003bff0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003c000:· | 0003c000:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003c010:· | 0003c010:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003c020:· | 0003c020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c030:· | 0003c030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003c040:· | 0003c040:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003c050:· | 0003c050:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c060:· | 0003c060:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c070:·7 | 0003c070:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c080:· | 0003c080:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003c090:· | 0003c090:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003c0a0:·2 | 0003c0a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003c0b0:·7 | 0003c0b0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003c0c0:· | 0003c0c0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003c0d0:· | 0003c0d0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003c0e0:·6 | 0003c0e0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003c0f0:· | 0003c0f0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003c100:· | 0003c100:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | ||
| 0003c110:· | 0003c110:·3830·3835·372d·360a·2020·2d20·434a·4953··80857-6.··-·CJIS | ||
| 0003c120:· | 0003c120:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003c130:· | 0003c130:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003c140:· | 0003c140:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c150:· | 0003c150:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003c160:·2 | 0003c160:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003c170:· | 0003c170:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c180:· | 0003c180:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003c190:· | 0003c190:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003c1a0:·20 | 0003c1a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c1b0:· | 0003c1b0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003c1c0:· | 0003c1c0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003c1d0:· | 0003c1d0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c1e0:· | 0003c1e0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003c1f0:· | 0003c1f0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003c200:· | 0003c200:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003c210:· | 0003c210:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003c220:· | 0003c220:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003c230:·7 | 0003c230:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003c240:· | 0003c240:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003c250:· | 0003c250:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003c260:·2 | 0003c260:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003c270:· | 0003c270:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003c280:· | 0003c280:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003c290:· | 0003c290:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c2a0:· | 0003c2a0:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003c2b0:· | 0003c2b0:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003c2c0:· | 0003c2c0:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003c2d0:· | 0003c2d0:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003c2e0:·6 | 0003c2e0:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003c2f0:· | 0003c2f0:·3a20·7975·6d20·7265·696e·7374·616c·6c20··:·yum·reinstall· | ||
| 0003c300:· | 0003c300:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003c310:· | 0003c310:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003c320:·2 | 0003c320:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003c330:·6 | 0003c330:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003c340:· | 0003c340:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003c350:· | 0003c350:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c360:·65 | 0003c360:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003c370:·6 | 0003c370:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003c380:· | 0003c380:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003c390:·20 | 0003c390:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003c3a0:· | 0003c3a0:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003c3b0:·6 | 0003c3b0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003c3c0:· | 0003c3c0:·6573·0a20·2020·2029·0a20·202d·2061·6e73··es.····).··-·ans | ||
| 0003c3d0:· | 0003c3d0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c3e0:·6 | 0003c3e0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c3f0:·2 | 0003c3f0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c400:· | 0003c400:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c410:· | 0003c410:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c420:·20 | 0003c420:·2043·4345·2d38·3038·3537·2d36·0a20·202d···CCE-80857-6.··- | ||
| 0003c430:· | 0003c430:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c440:· | 0003c440:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c450:· | 0003c450:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c460:· | 0003c460:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c470:· | 0003c470:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c480:· | 0003c480:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c490:· | 0003c490:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c4a0:· | 0003c4a0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c4b0:· | 0003c4b0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c4c0:· | 0003c4c0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c4d0:· | 0003c4d0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c4e0:· | 0003c4e0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c4f0:· | 0003c4f0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c500:· | 0003c500:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c510:· | 0003c510:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c520:· | 0003c520:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c530:· | 0003c530:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c540:· | 0003c540:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c550:· | 0003c550:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c560:· | 0003c560:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c570:· | 0003c570:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003c580:· | 0003c580:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003c590:· | 0003c590:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003c5a0:· | 0003c5a0:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003c5b0:· | 0003c5b0:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003c5c0:· | 0003c5c0:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003c5d0:· | 0003c5d0:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | ||
| 0003c5e0:·0a20·20 | 0003c5e0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003c5f0:·2 | 0003c5f0:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003c600:· | 0003c600:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003c610:· | 0003c610:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | ||
| 0003c620:·2 | 0003c620:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003c630:· | 0003c630:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003c640:· | 0003c640:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003c650:· | 0003c650:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003c660:· | 0003c660:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003c670:· | 0003c670:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003c680:· | 0003c680:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003c690:·6e6 | 0003c690:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003c6a0:· | 0003c6a0:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003c6b0:·726 | 0003c6b0:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003c6c0:·65 | 0003c6c0:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003c6d0:· | 0003c6d0:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| Max diff block lines reached; 17819604/17875384 bytes (99.69%) of diff not shown. | |||
| Offset 15289, 284 lines modified | Offset 15289, 284 lines modified | ||
| 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | ||
| 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bbf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc30:·7073·6522·2069·643d·2269·646d·3739·3930··pse"·id="idm7990 | |||
| 0003bc40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bc80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bc90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bcb0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bbf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003bc00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bc10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bc20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bc30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bc40:·643d·2269·646d·3739·3930·223e·3c70·7265··d="idm7990"><pre | |||
| 0003bc50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003bc60:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003bc70:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003bc80:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bc90:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bca0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bcb0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bcc0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bcd0:·743d·2223·6964·6d37·3939·3122·2074·6162··t="#idm7991"·tab | |||
| 0003bce0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bcf0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd00:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd10:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd20:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bd30:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bd40:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003bd50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bd60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bd70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bd80:·3d22·6964·6d37·3939·3122·3e3c·7461·626c··="idm7991"><tabl | |||
| 0003bd90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bda0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bdb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bdc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bdd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003bcc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003bcd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bce0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003bcf0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003bd00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003bd10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003be40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003be50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003be60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003be70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003be80:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003be90:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003bea0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003beb0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bec0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bed0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bee0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003bef0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bf00:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bf10:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bf20:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bf30:·7461·7267·6574·3d22·2369·646d·3739·3932··target="#idm7992 | |||
| 0003bf40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bf50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bf60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bf70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bf80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bf90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bfa0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bfb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bfc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bfd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bfe0:·2069·643d·2269·646d·3739·3932·223e·3c74···id="idm7992"><t | |||
| 0003bff0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c000:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c010:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c020:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c030:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c040:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c050:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c060:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c070:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c090:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c0b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c0c0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003 | 0003bd20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003c0e0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003c0f0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003c100:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003c110:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003c120:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003c130:·726e·656c·3b20·7468·656e·0a0a·6966·2021··rnel;·then..if·! | |||
| 0003c140:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003c150:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003c160:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003c170:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003c180:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003c190:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003c1a0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003c1b0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003 | 0003bd30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003bd40:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003bd50:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003bd60:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003bd70:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003bd80:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bd90:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bda0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bdb0:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bdc0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003bdd0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003bde0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003bdf0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003be00:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| Max diff block lines reached; 28944905/28982745 bytes (99.87%) of diff not shown. | |||
| Offset 15308, 284 lines modified | Offset 15308, 284 lines modified | ||
| 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | ||
| 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | ||
| 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bd20:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bd30:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bd40:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bd50:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bd60:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003bd70:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003bd80:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bd90:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bda0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bdb0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bdc0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bdd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bde0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bd20:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003bd30:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003bd40:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd50:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd60:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bd70:·6964·3d22·6964·6d37·3939·3022·3e3c·7072··id="idm7990"><pr | |||
| 0003bd80:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003bd90:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003bda0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003bdb0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003bdc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bdd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bde0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bdf0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003be00:·6574·3d22·2369·646d·3739·3931·2220·7461··et="#idm7991"·ta | |||
| 0003be10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003be20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003be30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003be40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003be50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003be60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003be70:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003be80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003be90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bea0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003beb0:·643d·2269·646d·3739·3931·223e·3c74·6162··d="idm7991"><tab | |||
| 0003bec0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bed0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bee0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bef0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bf00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003bdf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003bf20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bf30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bf40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bf60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003be00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bf80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bf90:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bfa0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bfb0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003bfc0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003bfd0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003bfe0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003bff0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c000:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003 | 0003be10:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003be20:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003be30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003be40:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003be50:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003be60:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003be70:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003be80:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003be90:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003bea0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003beb0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003bec0:·3038·3434·2d34·0a20·202d·2043·4a49·532d··0844-4.··-·CJIS- | |||
| 0003bed0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003bee0:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003bef0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003bf00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003bf10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003bf20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bf30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003bf40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bf50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bf60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bf70:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bf80:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003bf90:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003bfa0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003bfb0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003bfc0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003bfd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003bfe0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bff0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c000:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c010:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c020:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c030:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003c040:·452d·3830·3834·342d·340a·2020·2d20·434a··E-80844-4.··-·CJ | |||
| 0003c050:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c060:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c070:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c080:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c090:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c0a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c0b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c0c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c0d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c0e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c0f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c100:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c110:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c120:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c130:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c | 0003c140:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003c030:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c040:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c050:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c060:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | |||
| 0003c070:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003c080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| Max diff block lines reached; 28784744/28822584 bytes (99.87%) of diff not shown. | |||
| Offset 15108, 284 lines modified | Offset 15108, 284 lines modified | ||
| 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b0a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b0b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b0c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b0d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0e0:·6964·3d22·6964·6d38·3435·3822·3e3c·7461··id="idm8458"><ta | |||
| 0003b0f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b100:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b110:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b120:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b130:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b140:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b150:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b160:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b0a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b0b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0f0:·6d38·3435·3822·3e3c·7072·653e·3c63·6f64··m8458"><pre><cod | |||
| 0003b100:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b110:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b120:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b130:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b140:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b150:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b160:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b170:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b180:·646d·3834·3539·2220·7461·6269·6e64·6578··dm8459"·tabindex | |||
| 0003b190:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b1a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b1b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b1c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b1d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b1e0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b1f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b200:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b210:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b220:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b230:·3834·3539·223e·3c74·6162·6c65·2063·6c61··8459"><table·cla | |||
| 0003b240:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b250:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b260:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b270:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b280:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b170:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b2a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b180:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b190:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b1a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b2d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b2e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b2f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b300:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b310:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b320:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b330:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b340:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b350:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b360:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b370:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b | 0003b1b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b1c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b1d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b1e0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b1f0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b200:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b210:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b220:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b230:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b240:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b250:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b260:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b270:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b280:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b290:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b2d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b2e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b2f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b300:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b310:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b320:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b330:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b340:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b350:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b360:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b370:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b380:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b390:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b3a0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b3b0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b3c0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b3d0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b3e0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b3f0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b400:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b410:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b420:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b430:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b440:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b450:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b460:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b470:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b480:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b490:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b4a0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b4b0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | ||
| 0003b | 0003b4c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b4d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b | 0003b4e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b4f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b500:·6765·743d·2223·6964·6d38·3435·3922·2074··get="#idm8459"·t | ||
| 0003b3f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b400:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b410:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b420:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b430:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b440:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| Max diff block lines reached; 22918412/22956252 bytes (99.84%) of diff not shown. | |||
| Offset 15113, 284 lines modified | Offset 15113, 284 lines modified | ||
| 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b0f0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b100:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b110:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b120:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b130:·6522·2069·643d·2269·646d·3834·3538·223e··e"·id="idm8458"> | |||
| 0003b140:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b150:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b160:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b170:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b180:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b190:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b1b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b0f0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b100:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b110:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b120:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b130:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b140:·2269·646d·3834·3538·223e·3c70·7265·3e3c··"idm8458"><pre>< | |||
| 0003b150:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b160:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b170:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b1b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b1c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b1d0:·2223·6964·6d38·3435·3922·2074·6162·696e··"#idm8459"·tabin | |||
| 0003b1e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b1f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b230:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b240:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b250:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b260:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b270:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b280:·6964·6d38·3435·3922·3e3c·7461·626c·6520··idm8459"><table· | |||
| 0003b290:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b2d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b1c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b1d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b1e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b1f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b200:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b210:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b340:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b350:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b360:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b370:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b380:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b390:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b3a0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b3b0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b3c0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b3d0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b | 0003b220:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b230:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b240:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b250:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b260:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b270:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b280:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b290:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b2a0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b2b0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b2c0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b2d0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2e0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2f0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b300:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b310:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b320:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b330:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b340:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b350:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b360:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b370:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b380:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b390:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b3a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b3b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b3c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b3d0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b3e0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b3f0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b400:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b410:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b420:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b430:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b440:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b450:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b460:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b470:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b480:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b490:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b4a0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b4b0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b4c0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b4d0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b4e0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b4f0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b500:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b510:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b520:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b530:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b42 | 0003b540:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b550:·7461·7267·6574·3d22·2369·646d·3834·3539··target="#idm8459 | ||
| 0003b | 0003b560:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b450:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b460:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b470:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b480:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b490:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b4a0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b4b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| Max diff block lines reached; 23355601/23393441 bytes (99.84%) of diff not shown. | |||
| Offset 15103, 285 lines modified | Offset 15103, 285 lines modified | ||
| 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | ||
| 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b050:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b050:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b060:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b070:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b080:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b090:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0a0:·2269·646d·3834·3538·223e·3c74·6162·6c65··"idm8458"><table | |||
| 0003b0b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b0d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b0e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b0f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b110:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b060:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b070:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b080:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b090:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0a0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b0b0:·3538·223e·3c70·7265·3e3c·636f·6465·3e0a··58"><pre><code>. | |||
| 0003b0c0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b0d0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b0e0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b0f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b100:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b110:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b120:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b130:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003b140:·3435·3922·2074·6162·696e·6465·783d·2230··459"·tabindex="0 | |||
| 0003b150:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b160:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b170:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b180:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b190:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1a0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b1d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b1e0:·6170·7365·2220·6964·3d22·6964·6d38·3435··apse"·id="idm845 | |||
| 0003b1f0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b200:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b210:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b220:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b230:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003b120:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b130:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b260:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b140:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b150:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b160:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b170:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b2a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b | 0003b180:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b190:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b1a0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b1b0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b1c0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b1d0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b1e0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b1f0:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b200:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b210:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b220:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b230:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b240:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b250:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b260:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b270:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b280:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b290:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b2a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b2b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b2d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b2e0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b2f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b300:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b310:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b320:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b330:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b340:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b350:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b360:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b370:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b380:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b390:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b3a0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b3b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b3c0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b3d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b3e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b3f0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b400:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b410:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b420:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b430:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b440:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b450:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b460:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b470:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b480:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b490:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b4a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b4c0:·3d22·2369·646d·3834·3539·2220·7461·6269··="#idm8459"·tabi | |||
| 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b520:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b530:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b540:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b550:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b560:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b570:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b580:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b590:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| Max diff block lines reached; 10017921/10055899 bytes (99.62%) of diff not shown. | |||
| Offset 119, 60 lines modified | Offset 119, 14 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | } | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·rpm·--quiet·-q·kernel;·then | ||
| 148 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 149 | ····dnf·install·-y·"aide" | ||
| 150 | fi | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | dnf·install·aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | -·name:·Gather·the·package·facts | 131 | -·name:·Gather·the·package·facts |
| 172 | ··package_facts: | 132 | ··package_facts: |
| Offset 212, 14 lines modified | Offset 166, 60 lines modified | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | package·install·aide | 171 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | Run·the·following·command·to·generate·a·new·database: | 213 | Run·the·following·command·to·generate·a·new·database: |
| 220 | $·sudo·/usr/sbin/aide·--init | 214 | $·sudo·/usr/sbin/aide·--init |
| 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 222 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 216 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 223 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 217 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 224 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 218 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 247, 28 lines modified | Offset 247, 14 lines modified | ||
| 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 250 | ·············_\x8c_\x8i_\x8s············6.1.1 | 250 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1131057/1135851 bytes (99.58%) of diff not shown. | |||
| Offset 14773, 205 lines modified | Offset 14773, 205 lines modified | ||
| 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | ||
| 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039bb0:·6961·7469·6f6e·204 | 00039bb0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039bc0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00039bd0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039be0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039bf0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039c00:·2069·643d·2269·646d·3132·3833·3922·3e3c···id="idm12839">< | |||
| 00039c10:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039 | 00039bc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039bd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039be0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039bf0:·6c61·7073·6522·2069·643d·2269·646d·3132··lapse"·id="idm12 | |||
| 00039c00:·3833·3922·3e3c·7461·626c·6520·636c·6173··839"><table·clas | |||
| 00039c10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039c20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039c30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039c40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039c50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039c60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039c80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039c90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039ca0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039cb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039cc0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039cd0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039ce0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039cf0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039d00:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039d10:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039d20:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039d30:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039d40:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039d50:·2d38·3334·3534·2d39·0a20·202d·2065·6e61··-83454-9.··-·ena | |||
| 00039d60:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039d70:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039d80:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039d90:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039da0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039db0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039dc0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039dd0:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039de0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039 | 00039df0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | ||
| 00039 | 00039e00:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | ||
| 00039e10:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039e20:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039e30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039e40:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 00039e50:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 00039e60:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00039e70:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 00039e80:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 00039e90:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039ea0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 00039eb0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00039ec0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 00039ed0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 00039ee0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 00039ef0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039f00:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| 00039f10:·4345·2d38·3334·3534·2d39·0a20·202d·2065··CE-83454-9.··-·e | |||
| 00039f20:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039f30:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039f40:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039f50:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039f60:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039f70:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039f80:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039f90:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039fa0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00039fb0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039fc0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039fd0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039fe0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039ff0:·6574·3d22·2369·646d·3132·3834·3022·2074··et="#idm12840"·t | |||
| 0003a000:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003a010:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003a020:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003a030:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003a040:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003a050:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a060:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003a070:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a080:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a090:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a0a0:·3238·3430·223e·3c74·6162·6c65·2063·6c61··2840"><table·cla | |||
| 0003a0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a180:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a190:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003a1a0:·6163·6b61·6765·2069·6e73·7461·6c6c·2064··ackage·install·d | |||
| 0003a1b0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003 | 0003a1c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003 | 0003a1d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003 | 0003a1e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003 | 0003a1f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003 | 0003a200:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003 | 0003a210:·6964·6d31·3238·3431·2220·7461·6269·6e64··idm12841"·tabind | ||
| 0003 | 0003a220:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003 | 0003a230:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003 | 0003a240:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003 | 0003a250:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003 | 0003a260:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00039d00:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 00039d10:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 00039d20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00039d30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00039d40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039d50:·646d·3132·3834·3022·3e3c·7461·626c·6520··dm12840"><table· | |||
| Max diff block lines reached; 3405762/3432148 bytes (99.23%) of diff not shown. | |||
| Offset 84, 61 lines modified | Offset 84, 14 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | include·install_dnf-automatic | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | } | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 113 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 115 | ····dnf·install·-y·"dnf-automatic" | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=dnf-automatic | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | dnf·install·dnf-automatic | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 96 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 97 | ··package_facts: |
| Offset 171, 14 lines modified | Offset 124, 61 lines modified | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | package·install·dnf-automatic | 129 | package·install·dnf-automatic |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 141 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 143 | ····dnf·install·-y·"dnf-automatic" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | dnf·install·dnf-automatic | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_dnf-automatic | ||
| 160 | class·install_dnf-automatic·{ | ||
| 161 | ··package·{·'dnf-automatic': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=dnf-automatic | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 179 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 180 | automatic.conf. | 174 | automatic.conf. |
| 181 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 175 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 182 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 176 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 183 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 177 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 56 lines modified | Offset 189, 14 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-83456-4 | 190 | Identifiers:·CCE-83456-4 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 243942/249132 bytes (97.92%) of diff not shown. | |||
| Offset 15176, 254 lines modified | Offset 15176, 254 lines modified | ||
| 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4e0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b4f0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b500:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b510:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b520:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b530:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b540:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b550:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b560:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b570:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b580:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b590:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b5a0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003b5b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003b5c0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5d0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5e0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b5f0:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b600:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003b610:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b620:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b630:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b640:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b650:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b660:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b670:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b680:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b690:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6a0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6b0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6c0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6d0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6e0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b6f0:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b700:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003b710:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b720:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b730:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b740:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b750:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b760:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b770:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b780:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 0003b790:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 0003b7a0:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 0003b7b0:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003b7c0:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 0003b7d0:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003b7e0:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 0003b7f0:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b800:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 0003b810:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b820:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b830:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b840:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b860:·3d22·2369·646d·3932·3635·2220·7461·6269··="#idm9265"·tabi | |||
| 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 0003b8d0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0003b8e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b8f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b900:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b910:·2069·643d·2269·646d·3932·3635·223e·3c74···id="idm9265"><t | |||
| 0003b920:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b930:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b940:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b950:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b960:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b970:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b980:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b990:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b9a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9b0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b9c0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0003b9d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b9e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b9f0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003ba00:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ba10:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 0003ba20:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 0003ba30:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 0003ba40:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 0003ba50:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 0003ba60:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 0003ba70:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 0003ba80:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 0003ba90:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 0003baa0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 0003bab0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 0003bac0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 0003bad0:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 0003bae0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0003baf0:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 0003bb00:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 0003bb10:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 0003bb20:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 0003bb30:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 0003bb40:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 0003bb50:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 0003bb60:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 0003bb70:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 0003bb80:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 0003bb90:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003bba0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 0003bbb0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 0003bbc0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 0003bbd0:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 0003bbe0:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 0003bbf0:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 0003bc00:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 0003bc10:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 0003bc20:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc30:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc40:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bc50:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| Max diff block lines reached; 13211372/13245072 bytes (99.75%) of diff not shown. | |||
| Offset 105, 58 lines modified | Offset 105, 14 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 118 | ··set_fact: |
| Offset 209, 14 lines modified | Offset 165, 58 lines modified | ||
| 209 | ··-·PCI-DSSv4-2.2.7 | 165 | ··-·PCI-DSSv4-2.2.7 |
| 210 | ··-·configure_crypto_policy | 166 | ··-·configure_crypto_policy |
| 211 | ··-·high_severity | 167 | ··-·high_severity |
| 212 | ··-·low_complexity | 168 | ··-·low_complexity |
| 213 | ··-·low_disruption | 169 | ··-·low_disruption |
| 214 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 215 | ··-·restrict_strategy | 171 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 219 | Severity: ···medium | 214 | Severity: ···medium |
| 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 221 | Identifiers:·CCE-83445-7 | 216 | Identifiers:·CCE-83445-7 |
| 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 19 lines modified | Offset 227, 14 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1175725/1181144 bytes (99.54%) of diff not shown. | |||
| Offset 15136, 254 lines modified | Offset 15136, 254 lines modified | ||
| 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | ||
| 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b260:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b270:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b280:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b290:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2b0:·6d39·3236·3322·3e3c·7072·653e·3c63·6f64··m9263"><pre><cod | |||
| 0003b2c0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b2d0:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b2e0:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b2f0:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b300:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b310:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b320:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | |||
| 0003b330:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b340:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b350:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b360:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b370:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b380:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b390:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b3a0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b3b0:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b3c0:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b3d0:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b3e0:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b3f0:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b400:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b410:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b420:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b430:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b440:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b450:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b460:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b470:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b480:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b490:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b4a0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b4b0:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b4c0:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b4d0:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b4e0:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b4f0:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b500:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b510:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b520:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b530:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b540:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b550:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b560:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b570:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b580:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b590:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b5a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b5b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b5c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b5d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b5e0:·743d·2223·6964·6d39·3236·3522·2074·6162··t="#idm9265"·tab | |||
| 0003b5f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b600:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b610:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b620:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b630:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b640:·2122·3e52·656d·6564·6961·7469·6f6e·204b··!">Remediation·K | |||
| 0003b650:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003b660:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b670:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b680:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b690:·2220·6964·3d22·6964·6d39·3236·3522·3e3c··"·id="idm9265">< | |||
| 0003b6a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b6b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b6c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b6d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b6e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b6f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b700:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b710:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b720:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b730:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b740:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003b750:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b760:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b770:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003b780:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b790:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003b7a0:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003b7b0:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003b7c0:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003b7d0:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003b7e0:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003b7f0:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003b800:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003b810:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003b820:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003b830:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003b840:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003b850:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003b860:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003b870:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003b880:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003b890:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003b8a0:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003b8b0:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003b8c0:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003b8d0:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003b8e0:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003b8f0:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003b900:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003b910:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003b920:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003b930:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 0003b940:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003b950:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003b960:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003b970:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003b980:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003b990:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003b9a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b9b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b9c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b9d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| Max diff block lines reached; 9027595/9061295 bytes (99.63%) of diff not shown. | |||
| Offset 97, 58 lines modified | Offset 97, 14 lines modified | ||
| 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 100 | ·············_\x8c_\x8i_\x8s······1.6.1 | 100 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | var_system_crypto_policy='DEFAULT' | ||
| 106 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 107 | rc=$? | ||
| 108 | if·test·"$rc"·=·127;·then | ||
| 109 | » echo·"$stderr_of_call"·>&2 | ||
| 110 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 111 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 112 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 113 | » false··#·end·with·an·error·code | ||
| 114 | elif·test·"$rc"·!=·0;·then | ||
| 115 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 116 | » false··#·end·with·an·error·code | ||
| 117 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 148 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 109 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 149 | ··set_fact: | 110 | ··set_fact: |
| Offset 201, 14 lines modified | Offset 157, 58 lines modified | ||
| 201 | ··-·PCI-DSSv4-2.2.7 | 157 | ··-·PCI-DSSv4-2.2.7 |
| 202 | ··-·configure_crypto_policy | 158 | ··-·configure_crypto_policy |
| 203 | ··-·high_severity | 159 | ··-·high_severity |
| 204 | ··-·low_complexity | 160 | ··-·low_complexity |
| 205 | ··-·low_disruption | 161 | ··-·low_disruption |
| 206 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 207 | ··-·restrict_strategy | 163 | ··-·restrict_strategy |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 169 | --- | ||
| 170 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 171 | kind:·MachineConfig | ||
| 172 | spec: | ||
| 173 | ··config: | ||
| 174 | ····ignition: | ||
| 175 | ······version:·3.1.0 | ||
| 176 | ····systemd: | ||
| 177 | ······units: | ||
| 178 | ········-·name:·configure-crypto-policy.service | ||
| 179 | ··········enabled:·true | ||
| 180 | ··········contents:·| | ||
| 181 | ············[Unit] | ||
| 182 | ············Before=kubelet.service | ||
| 183 | ············[Service] | ||
| 184 | ············Type=oneshot | ||
| 185 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 186 | ············RemainAfterExit=yes | ||
| 187 | ············[Install] | ||
| 188 | ············WantedBy=multi-user.target | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | var_system_crypto_policy='DEFAULT' | ||
| 191 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 192 | rc=$? | ||
| 193 | if·test·"$rc"·=·127;·then | ||
| 194 | » echo·"$stderr_of_call"·>&2 | ||
| 195 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 196 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 197 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | elif·test·"$rc"·!=·0;·then | ||
| 200 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 201 | » false··#·end·with·an·error·code | ||
| 202 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 205 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 211 | Severity: ···medium | 206 | Severity: ···medium |
| 212 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 207 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 213 | Identifiers:·CCE-83445-7 | 208 | Identifiers:·CCE-83445-7 |
| 214 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 209 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 219, 19 lines modified | Offset 219, 14 lines modified | ||
| 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 222 | ·············_\x8c_\x8i_\x8s······1.6.2 | 222 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 880517/885934 bytes (99.39%) of diff not shown. | |||
| Offset 15177, 254 lines modified | Offset 15177, 254 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b500:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b540:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b550:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b560:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b570:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b580:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b590:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b5a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b5b0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003b5c0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003b5d0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5e0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5f0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b600:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b610:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003b620:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b630:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b640:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b650:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b660:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b670:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b680:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b690:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b6a0:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6b0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6c0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6d0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6e0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6f0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b700:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b710:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003b720:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b730:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b740:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b750:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b760:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b770:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b780:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b790:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 0003b7a0:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 0003b7b0:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 0003b7c0:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003b7d0:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 0003b7e0:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003b7f0:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 0003b800:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b810:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 0003b820:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b830:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b840:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b850:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b860:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b870:·3d22·2369·646d·3932·3635·2220·7461·6269··="#idm9265"·tabi | |||
| 0003b880:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b890:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b8a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8d0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 0003b8e0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0003b8f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b900:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b910:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b920:·2069·643d·2269·646d·3932·3635·223e·3c74···id="idm9265"><t | |||
| 0003b930:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b940:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b950:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b960:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b970:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b980:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b990:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b9a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b9b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b9d0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0003b9e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b9f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ba00:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003ba10:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ba20:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 0003ba30:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 0003ba40:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 0003ba50:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 0003ba60:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 0003ba70:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 0003ba80:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 0003ba90:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 0003baa0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 0003bab0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 0003bac0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 0003bad0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 0003bae0:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 0003baf0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0003bb00:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 0003bb10:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 0003bb20:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 0003bb30:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 0003bb40:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 0003bb50:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 0003bb60:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 0003bb70:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 0003bb80:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 0003bb90:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 0003bba0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003bbb0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 0003bbc0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 0003bbd0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 0003bbe0:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 0003bbf0:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 0003bc00:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 0003bc10:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 0003bc20:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 0003bc30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bc60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| Max diff block lines reached; 10344330/10378030 bytes (99.68%) of diff not shown. | |||
| Offset 105, 58 lines modified | Offset 105, 14 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 118 | ··set_fact: |
| Offset 209, 14 lines modified | Offset 165, 58 lines modified | ||
| 209 | ··-·PCI-DSSv4-2.2.7 | 165 | ··-·PCI-DSSv4-2.2.7 |
| 210 | ··-·configure_crypto_policy | 166 | ··-·configure_crypto_policy |
| 211 | ··-·high_severity | 167 | ··-·high_severity |
| 212 | ··-·low_complexity | 168 | ··-·low_complexity |
| 213 | ··-·low_disruption | 169 | ··-·low_disruption |
| 214 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 215 | ··-·restrict_strategy | 171 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 219 | Severity: ···medium | 214 | Severity: ···medium |
| 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 221 | Identifiers:·CCE-83445-7 | 216 | Identifiers:·CCE-83445-7 |
| 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 19 lines modified | Offset 227, 14 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1075191/1080610 bytes (99.50%) of diff not shown. | |||
| Offset 15165, 284 lines modified | Offset 15165, 284 lines modified | ||
| 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b430:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b440:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b450:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b460:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b470:·6964·3d22·6964·6d38·3435·3822·3e3c·7461··id="idm8458"><ta | |||
| 0003b480:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b490:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b4d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b430:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b440:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b450:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b460:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b470:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b480:·6d38·3435·3822·3e3c·7072·653e·3c63·6f64··m8458"><pre><cod | |||
| 0003b490:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b4a0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b4b0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b4c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b4d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b4e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b4f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b500:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b510:·646d·3834·3539·2220·7461·6269·6e64·6578··dm8459"·tabindex | |||
| 0003b520:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b530:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b540:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b550:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b560:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b570:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b5c0:·3834·3539·223e·3c74·6162·6c65·2063·6c61··8459"><table·cla | |||
| 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b500:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b630:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b510:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b520:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b | 0003b530:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b660:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b670:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b680:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b690:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b6a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b6b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b6c0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b6d0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b6e0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b6f0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b700:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b | 0003b540:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b550:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b560:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b570:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b580:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b590:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b5a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b5b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b5c0:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b5d0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b5e0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b5f0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b600:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b610:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b620:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b630:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b640:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b650:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b660:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b670:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b680:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b690:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6a0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6b0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b6c0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b6d0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b6e0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b6f0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b700:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b710:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b720:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b730:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b740:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b750:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b760:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b770:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b780:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b790:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b7a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b7b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b7c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b7d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b7e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b7f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b800:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b810:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b820:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b830:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b840:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | ||
| 0003b | 0003b850:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b | 0003b860:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b7 | 0003b870:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b | 0003b880:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b | 0003b890:·6765·743d·2223·6964·6d38·3435·3922·2074··get="#idm8459"·t | ||
| 0003b780:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b790:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b7a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b7b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b7c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b7d0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| Max diff block lines reached; 26234406/26272246 bytes (99.86%) of diff not shown. | |||
| Offset 15126, 284 lines modified | Offset 15126, 284 lines modified | ||
| 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | ||
| 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b1c0:·656d·6564·6961·7469·6f6e·204 | 0003b1c0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b1d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b1e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b1f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b200:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b210:·646d·3834·3538·223e·3c74·6162·6c65·2063··dm8458"><table·c | |||
| 0003b220:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b230:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b240:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b250:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b260:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b270:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b280:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b1d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b1e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b200:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b210:·7073·6522·2069·643d·2269·646d·3834·3538··pse"·id="idm8458 | |||
| 0003b220:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b230:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b240:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b250:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b260:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b270:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b280:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b290:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b2a0:·2d74·6172·6765·743d·2223·6964·6d38·3435··-target="#idm845 | |||
| 0003b2b0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003b2c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b2d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b2e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b2f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b300:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b310:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b320:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b330:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b340:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b350:·7365·2220·6964·3d22·6964·6d38·3435·3922··se"·id="idm8459" | |||
| 0003b360:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b370:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b380:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b390:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b3a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b290:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b2a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b3d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b2b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b2c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b2d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b2e0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b410:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b420:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b430:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b440:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b450:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b460:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b470:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b480:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b490:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b4a0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b | 0003b2f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b300:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b310:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b320:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b330:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b340:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b350:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b360:·4343·452d·3930·3834·332d·340a·2020·2d20··CCE-90843-4.··-· | |||
| 0003b370:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b380:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b390:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b3a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b3b0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b3c0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b3d0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b3e0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b3f0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b400:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b410:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b420:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b430:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b440:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b450:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b460:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b470:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b480:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b490:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b4a0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b4b0:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b4c0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b4d0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b4e0:·202d·2043·4345·2d39·3038·3433·2d34·0a20···-·CCE-90843-4.· | |||
| 0003b4f0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b500:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b510:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b530:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b540:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b550:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b560:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b570:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b580:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b590:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b5a0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b5b0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b5c0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b5d0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b | 0003b5e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b5f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b4e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b4f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b500:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b510:·646d·3834·3630·2220·7461·6269·6e64·6578··dm8460"·tabindex | |||
| 0003b520:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b530:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b540:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b550:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b560:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b570:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b580:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| Max diff block lines reached; 11729512/11767352 bytes (99.68%) of diff not shown. | |||
| Offset 106, 60 lines modified | Offset 106, 14 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | include·install_aide | ||
| 123 | class·install_aide·{ | ||
| 124 | ··package·{·'aide': | ||
| 125 | ····ensure·=>·'installed', | ||
| 126 | ··} | ||
| 127 | } | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | dnf·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 119 | ··package_facts: |
| Offset 199, 14 lines modified | Offset 153, 60 lines modified | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package·install·aide | 158 | package·install·aide |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 169 | if·rpm·--quiet·-q·kernel;·then | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 171 | ····dnf·install·-y·"aide" | ||
| 172 | fi | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | include·install_aide | ||
| 188 | class·install_aide·{ | ||
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | package·--add=aide | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 227, 28 lines modified | Offset 227, 14 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ·············_\x8c_\x8i_\x8s············6.1.1 | 230 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1378257/1383200 bytes (99.64%) of diff not shown. | |||
| Offset 15118, 284 lines modified | Offset 15118, 284 lines modified | ||
| 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | ||
| 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b140:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b150:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b160:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b170:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b180:·2069·643d·2269·646d·3834·3538·223e·3c74···id="idm8458"><t | |||
| 0003b190:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b1a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b1b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b1c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b1d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b1e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b1f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b200:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b140:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b150:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b160:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b170:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b180:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b190:·646d·3834·3538·223e·3c70·7265·3e3c·636f··dm8458"><pre><co | |||
| 0003b1a0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b1b0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b1c0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b1d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b1e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b1f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b200:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b220:·6964·6d38·3435·3922·2074·6162·696e·6465··idm8459"·tabinde | |||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b280:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b290:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b2b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2d0:·6d38·3435·3922·3e3c·7461·626c·6520·636c··m8459"><table·cl | |||
| 0003b2e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b300:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b310:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b320:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b210:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b340:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b220:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b230:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b240:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b370:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b380:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b390:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b3b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b3c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b3d0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3e0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3f0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b400:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b410:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b | 0003b250:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b260:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b270:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b280:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b290:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b2a0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b2b0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b2c0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b2d0:·3a0a·2020·2d20·4343·452d·3930·3834·332d··:.··-·CCE-90843- | |||
| 0003b2e0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003b2f0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b300:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b310:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b320:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b330:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b340:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b350:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b360:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b370:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b380:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b390:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b3a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b3b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b3c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b3d0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b3e0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b3f0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b400:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b410:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b420:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b430:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b440:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b450:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003b460:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003b470:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b480:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b490:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b4a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b4b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b4c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b4d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b4e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b4f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b500:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b510:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b520:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b530:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b540:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b550:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | ||
| 0003b | 0003b560:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b570:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b580:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b470:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b480:·6574·3d22·2369·646d·3834·3630·2220·7461··et="#idm8460"·ta | |||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| Max diff block lines reached; 11336731/11374571 bytes (99.67%) of diff not shown. | |||
| Offset 105, 60 lines modified | Offset 105, 14 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | -·name:·Gather·the·package·facts | 117 | -·name:·Gather·the·package·facts |
| 158 | ··package_facts: | 118 | ··package_facts: |
| Offset 198, 14 lines modified | Offset 152, 60 lines modified | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | package·install·aide | 157 | package·install·aide |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·rpm·--quiet·-q·kernel;·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····dnf·install·-y·"aide" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | dnf·install·aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | include·install_aide | ||
| 187 | class·install_aide·{ | ||
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·--add=aide | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 226, 28 lines modified | Offset 226, 14 lines modified | ||
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ·············_\x8c_\x8i_\x8s············6.1.1 | 229 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1322502/1327445 bytes (99.63%) of diff not shown. | |||
| Offset 15156, 284 lines modified | Offset 15156, 284 lines modified | ||
| 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | ||
| 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3a0:·6d65·6469·6174·696f·6e20·4 | 0003b3a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b3b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b3c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b3d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b3e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b3f0:·6d38·3435·3822·3e3c·7461·626c·6520·636c··m8458"><table·cl | |||
| 0003b400:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b410:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b420:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b430:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b440:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b460:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b3b0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b3c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3f0:·7365·2220·6964·3d22·6964·6d38·3435·3822··se"·id="idm8458" | |||
| 0003b400:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b410:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b420:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b430:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b440:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b450:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b460:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b470:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b480:·7461·7267·6574·3d22·2369·646d·3834·3539··target="#idm8459 | |||
| 0003b490:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b4a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b4b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b4c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b4d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4f0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b500:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b510:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b520:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b530:·6522·2069·643d·2269·646d·3834·3539·223e··e"·id="idm8459"> | |||
| 0003b540:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b550:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b560:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b570:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b580:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b470:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b5b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b5c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003b490:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b4a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b4b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b4c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b5f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b600:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b610:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b620:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b630:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b640:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b650:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b660:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b670:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b680:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b | 0003b4d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b4e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b4f0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b500:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b510:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b520:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b530:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b540:·4345·2d39·3038·3433·2d34·0a20·202d·2043··CE-90843-4.··-·C | |||
| 0003b550:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b560:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003b570:·3039·2d36·3531·3031·300a·2020·2d20·4e49··09-651010.··-·NI | |||
| 0003b580:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b590:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b5a0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b5b0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b5c0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b5d0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b5e0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b5f0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b600:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b610:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b620:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b630:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b640:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b650:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b660:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b670:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b680:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b690:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003b6a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b6b0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b6c0:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b6d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b6e0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b6f0:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b700:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b710:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b720:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b730:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b740:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b750:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b760:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b770:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b780:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b790:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b7a0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b7b0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b | 0003b7c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b | 0003b7d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b | 0003b7e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b | 0003b7f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b | 0003b800:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b | 0003b810:·6964·6d38·3435·3922·2074·6162·696e·6465··idm8459"·tabinde | ||
| 0003b | 0003b820:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b | 0003b830:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b | 0003b840:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b | 0003b850:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b | 0003b860:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b75 | 0003b870:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | ||
| Max diff block lines reached; 26025087/26062927 bytes (99.85%) of diff not shown. | |||
| Offset 15843, 253 lines modified | Offset 15843, 253 lines modified | ||
| 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | ||
| 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003de90:·656d·6564·6961·7469·6f6e·204 | 0003de90:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003dea0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003deb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003dec0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ded0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003dee0:·7073·6522·2069·643d·2269·646d·3931·3639··pse"·id="idm9169 | |||
| 0003def0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003d | 0003dea0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003deb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003dec0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ded0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003dee0:·646d·3931·3639·223e·3c74·6162·6c65·2063··dm9169"><table·c | |||
| 0003def0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003df00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003df10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003df20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003df30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003df40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003df50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003df60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003df70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003df80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003df90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003dfa0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003dfb0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003dfc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003dfd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003dfe0:·2d20·6e61·6d65·3a20·456e·7375·7265·2063··-·name:·Ensure·c | |||
| 0003dff0:·7279·7074·6f2d·706f·6c69·6369·6573·2069··rypto-policies·i | |||
| 0003e000:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003e010:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003 | 0003e020:·2063·7279·7074·6f2d·706f·6c69·6369·6573···crypto-policies | ||
| 0003 | 0003e030:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | ||
| 0003e040:·656e·740a·2020·7461·6773·3a0a·2020·2d20··ent.··tags:.··-· | |||
| 0003e050:·4343·452d·3833·3434·322d·340a·2020·2d20··CCE-83442-4.··-· | |||
| 0003e060:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003e070:·392d·3231·3531·3030·0a20·202d·2065·6e61··9-215100.··-·ena | |||
| 0003e080:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003e090:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003e0a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003e0b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003e0c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003e0d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003e0e0:·7061·636b·6167·655f·6372·7970·746f·2d70··package_crypto-p | |||
| 0003e0f0:·6f6c·6963·6965·735f·696e·7374·616c·6c65··olicies_installe | |||
| 0003 | 0003e100:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | ||
| 0003 | 0003e110:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003 | 0003e120:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003 | 0003e130:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003 | 0003e140:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003 | 0003e150:·6574·3d22·2369·646d·3931·3730·2220·7461··et="#idm9170"·ta | ||
| 0003 | 0003e160:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003 | 0003e170:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003 | 0003e180:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003 | 0003e190:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003 | 0003e1a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003 | 0003e1b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003dff0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003e000:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003e010:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003e020:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003e030:·643d·2269·646d·3931·3730·223e·3c74·6162··d="idm9170"><tab | |||
| 0003e040:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e050:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e060:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e070:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e080:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e0b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e0d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e0e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e100:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e110:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003e120:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003e130:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003e140:·616c·6c5f·6372·7970·746f·2d70·6f6c·6963··all_crypto-polic | |||
| 0003e150:·6965·730a·0a63·6c61·7373·2069·6e73·7461··ies..class·insta | |||
| 0003e160:·6c6c·5f63·7279·7074·6f2d·706f·6c69·6369··ll_crypto-polici | |||
| 0003e170:·6573·207b·0a20·2070·6163·6b61·6765·207b··es·{.··package·{ | |||
| 0003e180:·2027·6372·7970·746f·2d70·6f6c·6963·6965···'crypto-policie | |||
| 0003e190:·7327·3a0a·2020·2020·656e·7375·7265·203d··s':.····ensure·= | |||
| 0003e1a0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003e1b0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003e1c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003e1d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003e1e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003e1f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003e200:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 0003e210:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003e220:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003e230:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003e240:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003e250:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003e260:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003e270:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003e | 0003e1c0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003e | 0003e1d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003e | 0003e1e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003e | 0003e1f0:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | ||
| 0003e2 | 0003e200:·3730·223e·3c74·6162·6c65·2063·6c61·7373··70"><table·class | ||
| 0003e2 | 0003e210:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003e2 | 0003e220:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003e2 | 0003e230:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003e | 0003e240:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003e | 0003e250:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003e | 0003e260:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003e | 0003e270:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003e | 0003e280:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003e | 0003e290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003e | 0003e2a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003e370:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e380:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e390:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003e3a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e3b0:·653e·3c63·6f64·653e·0a69·6620·2120·7270··e><code>.if·!·rp | |||
| 0003e3c0:·6d20·2d71·202d·2d71·7569·6574·2022·6372··m·-q·--quiet·"cr | |||
| 0003e3d0:·7970·746f·2d70·6f6c·6963·6965·7322·203b··ypto-policies"·; | |||
| Max diff block lines reached; 6869525/6903087 bytes (99.51%) of diff not shown. | |||
| Offset 158, 79 lines modified | Offset 158, 79 lines modified | ||
| 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 159 | Identifiers:·CCE-83442-4 | 159 | Identifiers:·CCE-83442-4 |
| 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"crypto-policies" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_crypto-policies | ||
| 175 | class·install_crypto-policies·{ | ||
| 176 | ··package·{·'crypto-policies': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | 170 | -·name:·Ensure·crypto-policies·is·installed | |
| 171 | ··package: | ||
| 172 | ····name:·crypto-policies | ||
| 173 | ····state:·present | ||
| 174 | ··tags: | ||
| 175 | ··-·CCE-83442-4 | ||
| 176 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 177 | ··-·enable_strategy | ||
| 178 | ··-·low_complexity | ||
| 179 | ··-·low_disruption | ||
| 180 | ··-·medium_severity | ||
| 181 | ··-·no_reboot_needed | ||
| 182 | ··-·package_crypto-policies_installed | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 186 | ····dnf·install·-y·"crypto-policies" | ||
| 187 | 188 | package·install·crypto-policies | |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"crypto-policies" | ||
| 192 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | 198 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 199 | ····dnf·install·-y·"crypto-policies" | ||
| 200 | fi | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | dnf·install·crypto-policies | 206 | dnf·install·crypto-policies |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 212 | include·install_crypto-policies | ||
| 213 | class·install_crypto-policies·{ | ||
| 214 | ··package·{·'crypto-policies': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 205 | -·name:·Ensure·crypto-policies·is·installed | ||
| 206 | ··package: | ||
| 207 | ····name:·crypto-policies | ||
| 208 | ····state:·present | ||
| 209 | ··tags: | ||
| 210 | ··-·CCE-83442-4 | ||
| 211 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 212 | ··-·enable_strategy | ||
| 213 | ··-·low_complexity | ||
| 214 | ··-·low_disruption | ||
| 215 | ··-·medium_severity | ||
| 216 | ··-·no_reboot_needed | ||
| 217 | ··-·package_crypto-policies_installed | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | package· | 223 | package·--add=crypto-policies |
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 226 | $·sudo·update-crypto-policies·--set·FIPS | 226 | $·sudo·update-crypto-policies·--set·FIPS |
| 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 245, 58 lines modified | Offset 245, 14 lines modified | ||
| 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 248 | ·············_\x8c_\x8i_\x8s······1.6.1 | 248 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 253 | var_system_crypto_policy='FIPS' | ||
| 254 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 255 | rc=$? | ||
| 256 | if·test·"$rc"·=·127;·then | ||
| 257 | » echo·"$stderr_of_call"·>&2 | ||
| 258 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 259 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 260 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| Max diff block lines reached; 924883/933189 bytes (99.11%) of diff not shown. | |||
| Offset 15183, 414 lines modified | Offset 15183, 414 lines modified | ||
| 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b550:·696f·6e20· | 0003b550:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b560:·20e2 | 0003b560:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b570:·2063 | 0003b570:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b580:·6 | 0003b580:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b590:·2069 | 0003b590:·7365·2220·6964·3d22·6964·6d38·3131·3522··se"·id="idm8115" | ||
| 0003b5a0:· | 0003b5a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b5b0:·6 | 0003b5b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b5c0:·6 | 0003b5c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b5d0:· | 0003b5d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b5e0:·6 | 0003b5e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b5f0:·6 | 0003b5f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b600:· | 0003b600:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b610:· | 0003b610:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b620:· | 0003b620:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b630:·2 | 0003b630:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b640:· | 0003b640:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b650:· | 0003b650:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b660:· | 0003b660:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b670:· | 0003b670:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b680:· | 0003b680:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b690:·6 | 0003b690:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b6a0:· | 0003b6a0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003b6b0:· | 0003b6b0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003b6c0:·20 | 0003b6c0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003b6d0:· | 0003b6d0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003b6e0:· | 0003b6e0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003b6f0:· | 0003b6f0:·4345·2d39·3038·3431·2d38·0a20·202d·2043··CE-90841-8.··-·C | ||
| 0003b700:· | 0003b700:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003b710:· | 0003b710:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b720:· | 0003b720:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b730:· | 0003b730:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b740:· | 0003b740:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b750:· | 0003b750:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b760:· | 0003b760:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b770:· | 0003b770:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b780:· | 0003b780:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b790:· | 0003b790:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b7a0:· | 0003b7a0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b7b0:· | 0003b7b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b7c0:· | 0003b7c0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b7d0:· | 0003b7d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b7e0:· | 0003b7e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b7f0:· | 0003b7f0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b800:· | 0003b800:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b810:·6 | 0003b810:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b820:·7 | 0003b820:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b830:·6e6 | 0003b830:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b840:· | 0003b840:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b850:· | 0003b850:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b860:· | 0003b860:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003b870:· | 0003b870:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003b880:· | 0003b880:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003b890:·2 | 0003b890:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003b8a0:·6 | 0003b8a0:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003b8b0:· | 0003b8b0:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003b8c0:· | 0003b8c0:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003b8d0:·6 | 0003b8d0:·636d·643a·2064·6e66·2072·6569·6e73·7461··cmd:·dnf·reinsta | ||
| 0003b8e0:· | 0003b8e0:·6c6c·202d·790a·2020·7768·656e·3a0a·2020··ll·-y.··when:.·· | ||
| 0003b8f0:· | 0003b8f0:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003b900:· | 0003b900:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003b910:· | 0003b910:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003b920:· | 0003b920:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003b930:· | 0003b930:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b940:· | 0003b940:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003b950:·6 | 0003b950:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003b960:· | 0003b960:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003b970:·61 | 0003b970:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003b980:· | 0003b980:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003b990:· | 0003b990:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b9a0:· | 0003b9a0:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003b9b0:· | 0003b9b0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003b9c0:· | 0003b9c0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003b9d0:· | 0003b9d0:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003b9e0:· | 0003b9e0:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003b9f0:· | 0003b9f0:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003ba00:· | 0003ba00:·2020·2d20·4343·452d·3930·3834·312d·380a····-·CCE-90841-8. | ||
| 0003ba10:· | 0003ba10:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003ba20:· | 0003ba20:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003ba30:· | 0003ba30:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003ba40:· | 0003ba40:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003ba80:· | 0003ba80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba90:· | 0003ba90:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003baa0:· | 0003baa0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003bab0:· | 0003bab0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bac0:· | 0003bac0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003bad0:· | 0003bad0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bae0:·2 | 0003bae0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003baf0:· | 0003baf0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bb00:· | 0003bb00:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bb10:· | 0003bb10:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003bb20:· | 0003bb20:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bb30:· | 0003bb30:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bb40:· | 0003bb40:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bb50:· | 0003bb50:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bb60:· | 0003bb60:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bb70:· | 0003bb70:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bb80:· | 0003bb80:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bb90:· | 0003bb90:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003bba0:· | 0003bba0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003bbb0:· | 0003bbb0:·6c20·636f·6d6d·616e·6420·287a·7970·7065··l·command·(zyppe | ||
| 0003bbc0:· | 0003bbc0:·7229·270a·2020·7365·745f·6661·6374·3a0a··r)'.··set_fact:. | ||
| 0003bbd0:·2 | 0003bbd0:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003bbe0:· | 0003bbe0:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003bbf0:· | 0003bbf0:·643a·207a·7970·7065·7220·696e·202d·6620··d:·zypper·in·-f· | ||
| 0003bc00:·2d | 0003bc00:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003bc10:· | 0003bc10:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003bc20:·2 | 0003bc20:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bc30:· | 0003bc30:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003bc40:· | 0003bc40:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003bc50:· | 0003bc50:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bc60:·6 | 0003bc60:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003bc70:· | 0003bc70:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003bc80:·6 | 0003bc80:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003bc90:· | 0003bc90:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003bca0:·6 | 0003bca0:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003bcb0:· | 0003bcb0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| Max diff block lines reached; 6846157/6901937 bytes (99.19%) of diff not shown. | |||
| Offset 104, 33 lines modified | Offset 104, 14 lines modified | ||
| 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 129 | -·name:·Gather·the·package·facts | 116 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 117 | ··package_facts: |
| Offset 303, 14 lines modified | Offset 284, 33 lines modified | ||
| 303 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 304 | ··-·high_complexity | 285 | ··-·high_complexity |
| 305 | ··-·high_severity | 286 | ··-·high_severity |
| 306 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 307 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 308 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 309 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 313 | run·the·following·command·to·determine·which·package·owns·it: | 307 | run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 316 | $·sudo·rpm·--restore·PACKAGENAME | 310 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 46 lines modified | Offset 330, 14 lines modified | ||
| 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 369 | -·name:·Gather·the·package·facts | 342 | -·name:·Gather·the·package·facts |
| 370 | ··package_facts: | 343 | ··package_facts: |
| Offset 481, 14 lines modified | Offset 449, 46 lines modified | ||
| 481 | ··-·PCI-DSSv4-11.5.2 | 449 | ··-·PCI-DSSv4-11.5.2 |
| 482 | ··-·high_complexity | 450 | ··-·high_complexity |
| 483 | ··-·high_severity | 451 | ··-·high_severity |
| 484 | ··-·medium_disruption | 452 | ··-·medium_disruption |
| 485 | ··-·no_reboot_needed | 453 | ··-·no_reboot_needed |
| 486 | ··-·restrict_strategy | 454 | ··-·restrict_strategy |
| 487 | ··-·rpm_verify_ownership | 455 | ··-·rpm_verify_ownership |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 734981/742706 bytes (98.96%) of diff not shown. | |||
| Offset 15204, 414 lines modified | Offset 15204, 414 lines modified | ||
| 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b6a0:·696f·6e20· | 0003b6a0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b6b0:·20e2 | 0003b6b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b6c0:·2063 | 0003b6c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b6d0:·6 | 0003b6d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b6e0:·2069 | 0003b6e0:·7365·2220·6964·3d22·6964·6d38·3131·3522··se"·id="idm8115" | ||
| 0003b6f0:· | 0003b6f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b700:·6 | 0003b700:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b710:·6 | 0003b710:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b720:· | 0003b720:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b730:·6 | 0003b730:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b740:·6 | 0003b740:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b750:· | 0003b750:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b760:· | 0003b760:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b770:· | 0003b770:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b780:·2 | 0003b780:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b790:· | 0003b790:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b7a0:· | 0003b7a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b7b0:· | 0003b7b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b7c0:· | 0003b7c0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b7d0:· | 0003b7d0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b7e0:·6 | 0003b7e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b7f0:· | 0003b7f0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003b800:· | 0003b800:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003b810:·20 | 0003b810:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003b820:· | 0003b820:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003b830:· | 0003b830:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003b840:· | 0003b840:·4345·2d39·3038·3431·2d38·0a20·202d·2043··CE-90841-8.··-·C | ||
| 0003b850:· | 0003b850:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003b860:· | 0003b860:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b870:· | 0003b870:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b880:· | 0003b880:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b890:· | 0003b890:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b8a0:· | 0003b8a0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b8b0:· | 0003b8b0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b8c0:· | 0003b8c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b8d0:· | 0003b8d0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b8e0:· | 0003b8e0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b8f0:· | 0003b8f0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b900:· | 0003b900:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b910:· | 0003b910:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b920:· | 0003b920:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b930:· | 0003b930:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b940:· | 0003b940:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b950:· | 0003b950:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b960:·6 | 0003b960:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b970:·7 | 0003b970:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b980:·6e6 | 0003b980:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b990:· | 0003b990:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b9a0:· | 0003b9a0:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b9b0:· | 0003b9b0:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003b9c0:· | 0003b9c0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003b9d0:· | 0003b9d0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003b9e0:·2 | 0003b9e0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003b9f0:·6 | 0003b9f0:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003ba00:· | 0003ba00:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003ba10:· | 0003ba10:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003ba20:·6 | 0003ba20:·636d·643a·2064·6e66·2072·6569·6e73·7461··cmd:·dnf·reinsta | ||
| 0003ba30:· | 0003ba30:·6c6c·202d·790a·2020·7768·656e·3a0a·2020··ll·-y.··when:.·· | ||
| 0003ba40:· | 0003ba40:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003ba50:· | 0003ba50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003ba60:· | 0003ba60:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003ba70:· | 0003ba70:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003ba80:· | 0003ba80:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003ba90:· | 0003ba90:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003baa0:·6 | 0003baa0:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003bab0:· | 0003bab0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bac0:·61 | 0003bac0:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003bad0:· | 0003bad0:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003bae0:· | 0003bae0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003baf0:· | 0003baf0:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003bb00:· | 0003bb00:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003bb10:· | 0003bb10:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003bb20:· | 0003bb20:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003bb30:· | 0003bb30:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003bb40:· | 0003bb40:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003bb50:· | 0003bb50:·2020·2d20·4343·452d·3930·3834·312d·380a····-·CCE-90841-8. | ||
| 0003bb60:· | 0003bb60:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003bb70:· | 0003bb70:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003bb80:· | 0003bb80:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003bb90:· | 0003bb90:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003bba0:· | 0003bba0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bbb0:· | 0003bbb0:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003bbc0:· | 0003bbc0:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003bbd0:· | 0003bbd0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bbe0:· | 0003bbe0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003bbf0:· | 0003bbf0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003bc00:· | 0003bc00:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bc10:· | 0003bc10:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003bc20:· | 0003bc20:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bc30:·2 | 0003bc30:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bc40:· | 0003bc40:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bc50:· | 0003bc50:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bc60:· | 0003bc60:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003bc70:· | 0003bc70:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bc80:· | 0003bc80:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bc90:· | 0003bc90:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bca0:· | 0003bca0:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bcb0:· | 0003bcb0:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bcc0:· | 0003bcc0:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bcd0:· | 0003bcd0:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bce0:· | 0003bce0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003bcf0:· | 0003bcf0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003bd00:· | 0003bd00:·6c20·636f·6d6d·616e·6420·287a·7970·7065··l·command·(zyppe | ||
| 0003bd10:· | 0003bd10:·7229·270a·2020·7365·745f·6661·6374·3a0a··r)'.··set_fact:. | ||
| 0003bd20:·2 | 0003bd20:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003bd30:· | 0003bd30:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003bd40:· | 0003bd40:·643a·207a·7970·7065·7220·696e·202d·6620··d:·zypper·in·-f· | ||
| 0003bd50:·2d | 0003bd50:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003bd60:· | 0003bd60:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003bd70:·2 | 0003bd70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bd80:· | 0003bd80:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003bd90:· | 0003bd90:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003bda0:· | 0003bda0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bdb0:·6 | 0003bdb0:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003bdc0:· | 0003bdc0:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003bdd0:·6 | 0003bdd0:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003bde0:· | 0003bde0:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003bdf0:·6 | 0003bdf0:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003be00:· | 0003be00:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| Max diff block lines reached; 17360240/17416020 bytes (99.68%) of diff not shown. | |||
| Offset 109, 33 lines modified | Offset 109, 14 lines modified | ||
| 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·Gather·the·package·facts | 121 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 122 | ··package_facts: |
| Offset 308, 14 lines modified | Offset 289, 33 lines modified | ||
| 308 | ··-·PCI-DSSv4-11.5.2 | 289 | ··-·PCI-DSSv4-11.5.2 |
| 309 | ··-·high_complexity | 290 | ··-·high_complexity |
| 310 | ··-·high_severity | 291 | ··-·high_severity |
| 311 | ··-·medium_disruption | 292 | ··-·medium_disruption |
| 312 | ··-·no_reboot_needed | 293 | ··-·no_reboot_needed |
| 313 | ··-·restrict_strategy | 294 | ··-·restrict_strategy |
| 314 | ··-·rpm_verify_hashes | 295 | ··-·rpm_verify_hashes |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 299 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 300 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 301 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 302 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 303 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 304 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 305 | fi | ||
| 306 | else | ||
| 307 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 308 | fi | ||
| 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 316 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 310 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 317 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 311 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 318 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 312 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 319 | $·rpm·-qf·FILENAME | 313 | $·rpm·-qf·FILENAME |
| 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 337, 50 lines modified | Offset 337, 14 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 359 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 360 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 361 | ········do | ||
| 362 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | ········done | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 380 | -·name:·Gather·the·package·facts | 349 | -·name:·Gather·the·package·facts |
| 381 | ··package_facts: | 350 | ··package_facts: |
| Offset 496, 14 lines modified | Offset 460, 50 lines modified | ||
| 496 | ··-·PCI-DSSv4-11.5.2 | 460 | ··-·PCI-DSSv4-11.5.2 |
| 497 | ··-·high_complexity | 461 | ··-·high_complexity |
| 498 | ··-·high_severity | 462 | ··-·high_severity |
| 499 | ··-·medium_disruption | 463 | ··-·medium_disruption |
| 500 | ··-·no_reboot_needed | 464 | ··-·no_reboot_needed |
| 501 | ··-·restrict_strategy | 465 | ··-·restrict_strategy |
| 502 | ··-·rpm_verify_permissions | 466 | ··-·rpm_verify_permissions |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1287035/1295133 bytes (99.37%) of diff not shown. | |||
| Offset 15217, 414 lines modified | Offset 15217, 414 lines modified | ||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | ||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b770:·6564·6961·7469·6f6e·20 | 0003b770:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b780:· | 0003b780:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b790:·3e3c | 0003b790:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b7a0:· | 0003b7a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b7b0:·6170 | 0003b7b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b7c0:·3 | 0003b7c0:·3831·3135·223e·3c74·6162·6c65·2063·6c61··8115"><table·cla | ||
| 0003b7d0:· | 0003b7d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b7e0:·7 | 0003b7e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b7f0:· | 0003b7f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b800:· | 0003b800:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b810:· | 0003b810:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b820:· | 0003b820:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b830:· | 0003b830:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b840:·7 | 0003b840:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b850:· | 0003b850:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b860:· | 0003b860:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b870:·6 | 0003b870:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b880:· | 0003b880:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b890:· | 0003b890:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b8a0:·65 | 0003b8a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b8b0:· | 0003b8b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b8c0:·6 | 0003b8c0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b8d0:·6 | 0003b8d0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b8e0:· | 0003b8e0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b8f0:· | 0003b8f0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b900:·7 | 0003b900:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b910:·2 | 0003b910:·2020·2d20·4343·452d·3930·3834·312d·380a····-·CCE-90841-8. | ||
| 0003b920:· | 0003b920:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b930:· | 0003b930:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003b940:· | 0003b940:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003b950:· | 0003b950:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003b960:· | 0003b960:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b970:· | 0003b970:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003b980:·2 | 0003b980:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003b990:· | 0003b990:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b9a0:· | 0003b9a0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003b9b0:· | 0003b9b0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003b9c0:· | 0003b9c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b9d0:· | 0003b9d0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003b9e0:· | 0003b9e0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003b9f0:· | 0003b9f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003ba00:· | 0003ba00:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003ba10:· | 0003ba10:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003ba20:·6 | 0003ba20:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003ba30:· | 0003ba30:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003ba40:· | 0003ba40:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003ba50:·6 | 0003ba50:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003ba60:· | 0003ba60:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003ba70:· | 0003ba70:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003ba80:·2 | 0003ba80:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003ba90:·6 | 0003ba90:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003baa0:·74 | 0003baa0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003bab0:· | 0003bab0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003bac0:· | 0003bac0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003bad0:· | 0003bad0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003bae0:·6 | 0003bae0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003baf0:· | 0003baf0:·7461·6c6c·5f63·6d64·3a20·646e·6620·7265··tall_cmd:·dnf·re | ||
| 0003bb00:·6 | 0003bb00:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003bb10:·6 | 0003bb10:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003bb20:· | 0003bb20:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003bb30:· | 0003bb30:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bb40:· | 0003bb40:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003bb50:· | 0003bb50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bb60:· | 0003bb60:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003bb70:·6e | 0003bb70:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003bb80:· | 0003bb80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bb90:· | 0003bb90:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003bba0:·6 | 0003bba0:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003bbb0:· | 0003bbb0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003bbc0:· | 0003bbc0:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | ||
| 0003bbd0:· | 0003bbd0:·0a20·202d·2061·6e73·6962·6c65·5f64·6973··.··-·ansible_dis | ||
| 0003bbe0:· | 0003bbe0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003bbf0:· | 0003bbf0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003bc00:· | 0003bc00:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003bc10:·61 | 0003bc10:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003bc20:· | 0003bc20:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | ||
| 0003bc30:· | 0003bc30:·3431·2d38·0a20·202d·2043·4a49·532d·352e··41-8.··-·CJIS-5. | ||
| 0003bc40:· | 0003bc40:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003bc50:·3 | 0003bc50:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003bc60:· | 0003bc60:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bc70:· | 0003bc70:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003bc80:· | 0003bc80:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003bc90:· | 0003bc90:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bca0:· | 0003bca0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bcb0:· | 0003bcb0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bcc0:· | 0003bcc0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bcd0:· | 0003bcd0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003bce0:· | 0003bce0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bcf0:· | 0003bcf0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bd00:· | 0003bd00:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bd10:· | 0003bd10:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bd20:· | 0003bd20:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bd30:·6 | 0003bd30:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bd40:· | 0003bd40:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003bd50:· | 0003bd50:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003bd60:· | 0003bd60:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003bd70:· | 0003bd70:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003bd80:· | 0003bd80:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003bd90:· | 0003bd90:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003bda0:· | 0003bda0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003bdb0:· | 0003bdb0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003bdc0:· | 0003bdc0:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003bdd0:· | 0003bdd0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·2028··nstall·command·( | ||
| 0003bde0:· | 0003bde0:·7a79·7070·6572·2927·0a20·2073·6574·5f66··zypper)'.··set_f | ||
| 0003bdf0:· | 0003bdf0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003be00:· | 0003be00:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003be10:· | 0003be10:·6c6c·5f63·6d64·3a20·7a79·7070·6572·2069··ll_cmd:·zypper·i | ||
| 0003be20:· | 0003be20:·6e20·2d66·202d·790a·2020·7768·656e·3a0a··n·-f·-y.··when:. | ||
| 0003be30:·2 | 0003be30:·2020·2d20·6e6f·7420·2820·226b·6572·6e65····-·not·(·"kerne | ||
| 0003be40:· | 0003be40:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | ||
| 0003be50:· | 0003be50:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003be60:· | 0003be60:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | ||
| 0003be70:· | 0003be70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003be80:· | 0003be80:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | ||
| 0003be90:· | 0003be90:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | ||
| 0003bea0:· | 0003bea0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003beb0:·7 | 0003beb0:·7320·616e·6420·6e6f·7420·226f·7065·6e73··s·and·not·"opens | ||
| 0003bec0:· | 0003bec0:·6869·6674·2d6b·7562·656c·6574·2220·696e··hift-kubelet"·in | ||
| 0003bed0:· | 0003bed0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| Max diff block lines reached; 10202417/10258197 bytes (99.46%) of diff not shown. | |||
| Offset 111, 33 lines modified | Offset 111, 14 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 124 | ··package_facts: |
| Offset 310, 14 lines modified | Offset 291, 33 lines modified | ||
| 310 | ··-·PCI-DSSv4-11.5.2 | 291 | ··-·PCI-DSSv4-11.5.2 |
| 311 | ··-·high_complexity | 292 | ··-·high_complexity |
| 312 | ··-·high_severity | 293 | ··-·high_severity |
| 313 | ··-·medium_disruption | 294 | ··-·medium_disruption |
| 314 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 315 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 316 | ··-·rpm_verify_hashes | 297 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 318 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 319 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 320 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 321 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 323 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 337, 46 lines modified | Offset 337, 14 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 359 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 360 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 361 | done | ||
| 362 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 363 | #·correct·values | ||
| 364 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 365 | do | ||
| 366 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 367 | done | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 376 | -·name:·Gather·the·package·facts | 349 | -·name:·Gather·the·package·facts |
| 377 | ··package_facts: | 350 | ··package_facts: |
| Offset 488, 14 lines modified | Offset 456, 46 lines modified | ||
| 488 | ··-·PCI-DSSv4-11.5.2 | 456 | ··-·PCI-DSSv4-11.5.2 |
| 489 | ··-·high_complexity | 457 | ··-·high_complexity |
| 490 | ··-·high_severity | 458 | ··-·high_severity |
| 491 | ··-·medium_disruption | 459 | ··-·medium_disruption |
| 492 | ··-·no_reboot_needed | 460 | ··-·no_reboot_needed |
| 493 | ··-·restrict_strategy | 461 | ··-·restrict_strategy |
| 494 | ··-·rpm_verify_ownership | 462 | ··-·rpm_verify_ownership |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1041513/1049238 bytes (99.26%) of diff not shown. | |||
| Offset 15811, 253 lines modified | Offset 15811, 253 lines modified | ||
| 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | ||
| 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003dc90:·5265·6d65·6469·6174·696f·6e20·4 | 0003dc90:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003dca0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003dcb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003dcc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003dcd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003dce0:·6170·7365·2220·6964·3d22·6964·6d39·3136··apse"·id="idm916 | |||
| 0003dcf0:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0003d | 0003dca0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003dcb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003dcc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003dcd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003dce0:·6964·6d39·3136·3922·3e3c·7461·626c·6520··idm9169"><table· | |||
| 0003dcf0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003dd00:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003dd10:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003dd20:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003dd30:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003dd40:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003dd50:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003dd60:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003dd70:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003dd80:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003dd90:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003dda0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ddb0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ddc0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ddd0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003dde0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003ddf0:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003de00:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003de10:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003d | 0003de20:·3a20·6372·7970·746f·2d70·6f6c·6963·6965··:·crypto-policie | ||
| 0003d | 0003de30:·730a·2020·2020·7374·6174·653a·2070·7265··s.····state:·pre | ||
| 0003de40:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 0003de50:·2043·4345·2d38·3334·3432·2d34·0a20·202d···CCE-83442-4.··- | |||
| 0003de60:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003de70:·3039·2d32·3135·3130·300a·2020·2d20·656e··09-215100.··-·en | |||
| 0003de80:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003de90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003dea0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003deb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003dec0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ded0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003dee0:·2070·6163·6b61·6765·5f63·7279·7074·6f2d···package_crypto- | |||
| 0003def0:·706f·6c69·6369·6573·5f69·6e73·7461·6c6c··policies_install | |||
| 0003d | 0003df00:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | ||
| 0003d | 0003df10:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003d | 0003df20:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003d | 0003df30:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003d | 0003df40:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003d | 0003df50:·6765·743d·2223·6964·6d39·3137·3022·2074··get="#idm9170"·t | ||
| 0003d | 0003df60:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003d | 0003df70:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003d | 0003df80:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003d | 0003df90:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003d | 0003dfa0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003d | 0003dfb0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ddf0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003de00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003de10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003de20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003de30:·6964·3d22·6964·6d39·3137·3022·3e3c·7461··id="idm9170"><ta | |||
| 0003de40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003de50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003de60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003de70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003de80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003de90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003dea0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003deb0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003dec0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ded0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003dee0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003def0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003df00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003df10:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003df20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003df30:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003df40:·7461·6c6c·5f63·7279·7074·6f2d·706f·6c69··tall_crypto-poli | |||
| 0003df50:·6369·6573·0a0a·636c·6173·7320·696e·7374··cies..class·inst | |||
| 0003df60:·616c·6c5f·6372·7970·746f·2d70·6f6c·6963··all_crypto-polic | |||
| 0003df70:·6965·7320·7b0a·2020·7061·636b·6167·6520··ies·{.··package· | |||
| 0003df80:·7b20·2763·7279·7074·6f2d·706f·6c69·6369··{·'crypto-polici | |||
| 0003df90:·6573·273a·0a20·2020·2065·6e73·7572·6520··es':.····ensure· | |||
| 0003dfa0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003dfb0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003dfc0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003dfd0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003dfe0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003dff0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003e000:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0003e010:·3137·3122·2074·6162·696e·6465·783d·2230··171"·tabindex="0 | |||
| 0003e020:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003e030:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003e040:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003e050:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003e060:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e070:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003 | 0003dfc0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003 | 0003dfd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e0 | 0003dfe0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 0003dff0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | ||
| 0003e0 | 0003e000:·3137·3022·3e3c·7461·626c·6520·636c·6173··170"><table·clas | ||
| 0003e0 | 0003e010:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e0 | 0003e020:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e0 | 0003e030:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003e | 0003e040:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003e | 0003e050:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003e | 0003e060:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003e | 0003e070:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003e | 0003e080:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003e | 0003e090:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003e | 0003e0a0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003e170:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003e180:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003e190:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003e1a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003e1b0:·7265·3e3c·636f·6465·3e0a·6966·2021·2072··re><code>.if·!·r | |||
| 0003e1c0:·706d·202d·7120·2d2d·7175·6965·7420·2263··pm·-q·--quiet·"c | |||
| 0003e1d0:·7279·7074·6f2d·706f·6c69·6369·6573·2220··rypto-policies"· | |||
| Max diff block lines reached; 6867938/6901500 bytes (99.51%) of diff not shown. | |||
| Offset 149, 79 lines modified | Offset 149, 79 lines modified | ||
| 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 150 | Identifiers:·CCE-83442-4 | 150 | Identifiers:·CCE-83442-4 |
| 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"crypto-policies" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | include·install_crypto-policies | ||
| 166 | class·install_crypto-policies·{ | ||
| 167 | ··package·{·'crypto-policies': | ||
| 168 | ····ensure·=>·'installed', | ||
| 169 | ··} | ||
| 170 | 161 | -·name:·Ensure·crypto-policies·is·installed | |
| 162 | ··package: | ||
| 163 | ····name:·crypto-policies | ||
| 164 | ····state:·present | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83442-4 | ||
| 167 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 168 | ··-·enable_strategy | ||
| 169 | ··-·low_complexity | ||
| 170 | ··-·low_disruption | ||
| 171 | ··-·medium_severity | ||
| 172 | ··-·no_reboot_needed | ||
| 173 | ··-·package_crypto-policies_installed | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 177 | ····dnf·install·-y·"crypto-policies" | ||
| 178 | 179 | package·install·crypto-policies | |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | [[packages]] | ||
| 182 | name·=·"crypto-policies" | ||
| 183 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | 189 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | |
| 190 | ····dnf·install·-y·"crypto-policies" | ||
| 191 | fi | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | dnf·install·crypto-policies | 197 | dnf·install·crypto-policies |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | include·install_crypto-policies | ||
| 204 | class·install_crypto-policies·{ | ||
| 205 | ··package·{·'crypto-policies': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 196 | -·name:·Ensure·crypto-policies·is·installed | ||
| 197 | ··package: | ||
| 198 | ····name:·crypto-policies | ||
| 199 | ····state:·present | ||
| 200 | ··tags: | ||
| 201 | ··-·CCE-83442-4 | ||
| 202 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 203 | ··-·enable_strategy | ||
| 204 | ··-·low_complexity | ||
| 205 | ··-·low_disruption | ||
| 206 | ··-·medium_severity | ||
| 207 | ··-·no_reboot_needed | ||
| 208 | ··-·package_crypto-policies_installed | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | package· | 214 | package·--add=crypto-policies |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 236, 58 lines modified | Offset 236, 14 lines modified | ||
| 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 239 | ·············_\x8c_\x8i_\x8s······1.6.1 | 239 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | var_system_crypto_policy='FIPS:OSPP' | ||
| 245 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 246 | rc=$? | ||
| 247 | if·test·"$rc"·=·127;·then | ||
| 248 | » echo·"$stderr_of_call"·>&2 | ||
| 249 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 250 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 251 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| Max diff block lines reached; 924888/933209 bytes (99.11%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | ||
| 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b700:·6f6e·20 | 0003b700:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003b710:·e287 | 0003b710:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b720:·636c | 0003b720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b730:·6c6 | 0003b730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b740:·6964 | 0003b740:·6522·2069·643d·2269·646d·3831·3135·223e··e"·id="idm8115"> | ||
| 0003b750:· | 0003b750:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b760:·6 | 0003b760:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b770:·6 | 0003b770:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b780:· | 0003b780:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b790:·2 | 0003b790:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b7a0:· | 0003b7a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003b7b0:· | 0003b7b0:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003b7c0:· | 0003b7c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b7d0:· | 0003b7d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003b7e0:· | 0003b7e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b7f0:· | 0003b7f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b800:·6 | 0003b800:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b810:· | 0003b810:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b820:· | 0003b820:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003b830:·7 | 0003b830:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003b840:·6 | 0003b840:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003b850:· | 0003b850:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003b860:· | 0003b860:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003b870:· | 0003b870:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003b880:· | 0003b880:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003b890:·6 | 0003b890:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | ||
| 0003b8a0:· | 0003b8a0:·452d·3930·3834·312d·380a·2020·2d20·434a··E-90841-8.··-·CJ | ||
| 0003b8b0:· | 0003b8b0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b8c0:· | 0003b8c0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b8d0:·2 | 0003b8d0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b8e0:· | 0003b8e0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b8f0:·5 | 0003b8f0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b900:· | 0003b900:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b910:· | 0003b910:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b920:· | 0003b920:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b930:· | 0003b930:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b940:· | 0003b940:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b950:· | 0003b950:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b960:· | 0003b960:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b970:· | 0003b970:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b980:· | 0003b980:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b990:· | 0003b990:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b9a0:· | 0003b9a0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b9b0:· | 0003b9b0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b9c0:· | 0003b9c0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003b9d0:·6 | 0003b9d0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003b9e0:· | 0003b9e0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003b9f0:· | 0003b9f0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003ba00:· | 0003ba00:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003ba10:·7 | 0003ba10:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003ba20:· | 0003ba20:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003ba30:· | 0003ba30:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003ba40:·2026·6 | 0003ba40:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003ba50:· | 0003ba50:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003ba60:· | 0003ba60:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003ba70:· | 0003ba70:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003ba80:·6 | 0003ba80:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003ba90:· | 0003ba90:·6c20·2d79·0a20·2077·6865·6e3a·0a20·202d··l·-y.··when:.··- | ||
| 0003baa0:· | 0003baa0:·206e·6f74·2028·2022·6b65·726e·656c·2220···not·(·"kernel"· | ||
| 0003bab0:· | 0003bab0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bac0:·2 | 0003bac0:·2e70·6163·6b61·6765·7320·616e·6420·2272··.packages·and·"r | ||
| 0003bad0:·7 | 0003bad0:·706d·2d6f·7374·7265·6522·2069·6e20·616e··pm-ostree"·in·an | ||
| 0003bae0:· | 0003bae0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003baf0:·6 | 0003baf0:·6167·6573·0a20·2020·2061·6e64·2022·626f··ages.····and·"bo | ||
| 0003bb00:·6 | 0003bb00:·6f74·6322·2069·6e20·616e·7369·626c·655f··otc"·in·ansible_ | ||
| 0003bb10:·6 | 0003bb10:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003bb20:· | 0003bb20:·6e64·206e·6f74·2022·6f70·656e·7368·6966··nd·not·"openshif | ||
| 0003bb30:· | 0003bb30:·742d·6b75·6265·6c65·7422·2069·6e20·616e··t-kubelet"·in·an | ||
| 0003bb40:· | 0003bb40:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003bb50:· | 0003bb50:·6167·6573·0a20·2020·2029·0a20·202d·2061··ages.····).··-·a | ||
| 0003bb60:·6 | 0003bb60:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003bb70:· | 0003bb70:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003bb80:· | 0003bb80:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003bb90:· | 0003bb90:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003bba0:·6 | 0003bba0:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003bbb0:· | 0003bbb0:·202d·2043·4345·2d39·3038·3431·2d38·0a20···-·CCE-90841-8.· | ||
| 0003bbc0:· | 0003bbc0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bbd0:· | 0003bbd0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bbe0:· | 0003bbe0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bbf0:· | 0003bbf0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bc00:· | 0003bc00:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bc10:· | 0003bc10:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003bc20:· | 0003bc20:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bc30:· | 0003bc30:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bc40:· | 0003bc40:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bc50:·3 | 0003bc50:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bc60:· | 0003bc60:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bc70:· | 0003bc70:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bc80:· | 0003bc80:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bc90:· | 0003bc90:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bca0:· | 0003bca0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bcb0:· | 0003bcb0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bcc0:· | 0003bcc0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bcd0:· | 0003bcd0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bce0:· | 0003bce0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bcf0:· | 0003bcf0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bd00:· | 0003bd00:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bd10:· | 0003bd10:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bd20:·2 | 0003bd20:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bd30:· | 0003bd30:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003bd40:· | 0003bd40:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003bd50:· | 0003bd50:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003bd60:· | 0003bd60:·2063·6f6d·6d61·6e64·2028·7a79·7070·6572···command·(zypper | ||
| 0003bd70:· | 0003bd70:·2927·0a20·2073·6574·5f66·6163·743a·0a20··)'.··set_fact:.· | ||
| 0003bd80:· | 0003bd80:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003bd90:· | 0003bd90:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003bda0:· | 0003bda0:·3a20·7a79·7070·6572·2069·6e20·2d66·202d··:·zypper·in·-f·- | ||
| 0003bdb0:· | 0003bdb0:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003bdc0:· | 0003bdc0:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003bdd0:· | 0003bdd0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bde0:· | 0003bde0:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003bdf0:·6 | 0003bdf0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003be00:·6 | 0003be00:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003be10:·7 | 0003be10:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003be20:·2 | 0003be20:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003be30:· | 0003be30:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003be40:· | 0003be40:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003be50:· | 0003be50:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003be60:· | 0003be60:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| Max diff block lines reached; 17917751/17973531 bytes (99.69%) of diff not shown. | |||
| Offset 15159, 284 lines modified | Offset 15159, 284 lines modified | ||
| 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b3d0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b3e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b3f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b400:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b410:·6522·2069·643d·2269·646d·3834·3538·223e··e"·id="idm8458"> | |||
| 0003b420:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b430:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b440:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b450:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b460:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b470:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b490:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b3d0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b3e0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b3f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b400:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b410:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b420:·2269·646d·3834·3538·223e·3c70·7265·3e3c··"idm8458"><pre>< | |||
| 0003b430:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b440:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b450:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b460:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b470:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b480:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b490:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b4a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b4b0:·2223·6964·6d38·3435·3922·2074·6162·696e··"#idm8459"·tabin | |||
| 0003b4c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b4d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b4e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b4f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b500:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b510:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b520:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b530:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b540:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b550:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b560:·6964·6d38·3435·3922·3e3c·7461·626c·6520··idm8459"><table· | |||
| 0003b570:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b580:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b590:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b5a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b5b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b4c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b4d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b4e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b4f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b620:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b630:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b640:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b650:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b660:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b670:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b680:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b690:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b6a0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b6b0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b | 0003b500:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b510:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b520:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b530:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b540:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b550:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b560:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b570:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b580:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b590:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b5a0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b5b0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b5c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b5d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b5e0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b5f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b600:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b610:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b620:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b630:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b640:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b650:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b660:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b670:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b680:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b690:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b6a0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b6b0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b6c0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b6d0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b6e0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b6f0:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b700:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b710:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b720:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b730:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b740:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b750:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b760:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b770:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b780:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b790:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b7a0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b7b0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b7c0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b7d0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b7e0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b7f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b800:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b810:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b820:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b830:·7461·7267·6574·3d22·2369·646d·3834·3539··target="#idm8459 | ||
| 0003b | 0003b840:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b850:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b860:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b75 | 0003b870:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003b880:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b | 0003b890:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b | 0003b8a0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | ||
| 0003b | 0003b8b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| Max diff block lines reached; 32786334/32824174 bytes (99.88%) of diff not shown. | |||
| Offset 15177, 285 lines modified | Offset 15177, 285 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d38·3435·3822·3e3c·7461·626c·6520··idm8458"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b500:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b510:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b520:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b530:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b540:·6170·7365·2220·6964·3d22·6964·6d38·3435··apse"·id="idm845 | |||
| 0003b550:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b560:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b570:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b580:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b590:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b5a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b5b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b5c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b5d0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b5e0:·3539·2220·7461·6269·6e64·6578·3d22·3022··59"·tabindex="0" | |||
| 0003b5f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b600:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b610:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b620:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b630:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b640:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b650:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b660:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b670:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b680:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b690:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b6a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b6b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b6c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b6d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b700:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b740:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b750:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b760:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b770:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b780:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b790:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b7a0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b7b0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b7c0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b7d0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b | 0003b620:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003b630:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b640:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b650:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b660:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b670:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b680:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b690:·2043·4345·2d39·3038·3433·2d34·0a20·202d···CCE-90843-4.··- | |||
| 0003b6a0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b6b0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b6c0:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b6d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b6e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b6f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b700:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b710:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b720:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b730:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b740:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b750:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b760:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b770:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b780:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b790:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b7a0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b7b0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b7c0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b7d0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b7e0:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003b7f0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b800:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b810:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b820:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b830:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b840:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b850:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b860:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b870:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b880:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b890:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b8a0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b8b0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b8c0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b8d0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b8e0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b8f0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b900:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b | 0003b910:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003b920:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b810:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b820:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b830:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b840:·6964·6d38·3436·3022·2074·6162·696e·6465··idm8460"·tabinde | |||
| 0003b850:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b860:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b870:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b880:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b890:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b8a0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b8b0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| Max diff block lines reached; 32703373/32741351 bytes (99.88%) of diff not shown. | |||
| Offset 15127, 408 lines modified | Offset 15127, 408 lines modified | ||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | ||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b1e0:·6c6 | 0003b1e0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b1f0:·3e3c | 0003b1f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b200:·2270 | 0003b200:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b210:·6 | 0003b210:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b220:·6d31 | 0003b220:·2269·646d·3136·3038·223e·3c74·6162·6c65··"idm1608"><table | ||
| 0003b230:· | 0003b230:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b240:·6 | 0003b240:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b250:·6 | 0003b250:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b260:· | 0003b260:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b270:· | 0003b270:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b280:· | 0003b280:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b290:· | 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b2a0:· | 0003b2a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b2b0:· | 0003b2b0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b2c0:· | 0003b2c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b2d0:· | 0003b2d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b2e0:· | 0003b2e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b2f0:· | 0003b2f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b300:· | 0003b300:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b310:· | 0003b310:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b320:·6 | 0003b320:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b330:· | 0003b330:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b340:· | 0003b340:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b350:·6 | 0003b350:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b360:· | 0003b360:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b370:·6 | 0003b370:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b380:· | 0003b380:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b390:· | 0003b390:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b3a0:· | 0003b3a0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b3b0:· | 0003b3b0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b3c0:·2 | 0003b3c0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b3d0:· | 0003b3d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b3e0:· | 0003b3e0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b3f0:·2 | 0003b3f0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b400:· | 0003b400:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b410:· | 0003b410:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b420:· | 0003b420:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b430:· | 0003b430:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b440:· | 0003b440:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b450:·2 | 0003b450:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b460:· | 0003b460:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b470:·6 | 0003b470:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b480:· | 0003b480:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b490:· | 0003b490:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b4a0:· | 0003b4a0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b4b0:·6 | 0003b4b0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b4c0:·7 | 0003b4c0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b4d0:· | 0003b4d0:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b4e0:· | 0003b4e0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b4f0:· | 0003b4f0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b500:·6 | 0003b500:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b510:· | 0003b510:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b520:· | 0003b520:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b530:·6 | 0003b530:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b540:· | 0003b540:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7975··einstall_cmd:·yu | ||
| 0003b550:·6 | 0003b550:·6d20·7265·696e·7374·616c·6c20·2d79·0a20··m·reinstall·-y.· | ||
| 0003b560:· | 0003b560:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003b570:· | 0003b570:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003b580:· | 0003b580:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003b590:· | 0003b590:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003b5a0:·7 | 0003b5a0:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003b5b0:· | 0003b5b0:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b5c0:· | 0003b5c0:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003b5d0:· | 0003b5d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003b5e0:· | 0003b5e0:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003b5f0:· | 0003b5f0:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003b600:· | 0003b600:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| 0003b610:· | 0003b610:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003b620:· | 0003b620:·2020·2029·0a20·202d·2061·6e73·6962·6c65·····).··-·ansible | ||
| 0003b630:· | 0003b630:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b640:· | 0003b640:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b650:· | 0003b650:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b660:· | 0003b660:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b670:· | 0003b670:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b680:· | 0003b680:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b690:· | 0003b690:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b6a0:· | 0003b6a0:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b6b0:·3 | 0003b6b0:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b6c0:· | 0003b6c0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b6d0:· | 0003b6d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b6e0:· | 0003b6e0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b6f0:· | 0003b6f0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b700:· | 0003b700:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b710:· | 0003b710:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b720:·3 | 0003b720:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b730:· | 0003b730:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b740:· | 0003b740:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b750:· | 0003b750:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b760:· | 0003b760:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b770:·20 | 0003b770:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b780:·6 | 0003b780:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b790:·6 | 0003b790:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b7a0:· | 0003b7a0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b7b0:·6 | 0003b7b0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b7c0:· | 0003b7c0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003b7d0:· | 0003b7d0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003b7e0:· | 0003b7e0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003b7f0:· | 0003b7f0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003b800:· | 0003b800:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| 0003b810:·20 | 0003b810:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | ||
| 0003b820:· | 0003b820:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | ||
| 0003b830:· | 0003b830:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b840:· | 0003b840:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b850:· | 0003b850:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003b860:· | 0003b860:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | ||
| 0003b870:· | 0003b870:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b880:· | 0003b880:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b890:· | 0003b890:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b8a0:· | 0003b8a0:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b8b0:· | 0003b8b0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b8c0:· | 0003b8c0:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b8d0:· | 0003b8d0:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b8e0:· | 0003b8e0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b8f0:·6 | 0003b8f0:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b900:· | 0003b900:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b910:· | 0003b910:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b920:·7 | 0003b920:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b930:· | 0003b930:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| Max diff block lines reached; 14094326/14149278 bytes (99.61%) of diff not shown. | |||
| Offset 97, 33 lines modified | Offset 97, 14 lines modified | ||
| 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Gather·the·package·facts | 109 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 110 | ··package_facts: |
| Offset 290, 14 lines modified | Offset 271, 33 lines modified | ||
| 290 | ··-·PCI-DSSv4-11.5.2 | 271 | ··-·PCI-DSSv4-11.5.2 |
| 291 | ··-·high_complexity | 272 | ··-·high_complexity |
| 292 | ··-·high_severity | 273 | ··-·high_severity |
| 293 | ··-·medium_disruption | 274 | ··-·medium_disruption |
| 294 | ··-·no_reboot_needed | 275 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 276 | ··-·restrict_strategy |
| 296 | ··-·rpm_verify_hashes | 277 | ··-·rpm_verify_hashes |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 280 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 282 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 283 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 284 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 285 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 286 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 287 | fi | ||
| 288 | else | ||
| 289 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 290 | fi | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 292 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 293 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 294 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 301 | $·rpm·-qf·FILENAME | 295 | $·rpm·-qf·FILENAME |
| 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 296 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 318, 50 lines modified | Offset 318, 14 lines modified | ||
| 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 331 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 332 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 333 | declare·-A·SETPERMS_RPM_DICT | ||
| 334 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 335 | #·is·expected·by·the·RPM·database | ||
| 336 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 337 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 338 | do | ||
| 339 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 340 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 341 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 342 | ········do | ||
| 343 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | ········done | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 361 | -·name:·Gather·the·package·facts | 330 | -·name:·Gather·the·package·facts |
| 362 | ··package_facts: | 331 | ··package_facts: |
| Offset 473, 14 lines modified | Offset 437, 50 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 437 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·high_complexity | 438 | ··-·high_complexity |
| 475 | ··-·high_severity | 439 | ··-·high_severity |
| 476 | ··-·medium_disruption | 440 | ··-·medium_disruption |
| 477 | ··-·no_reboot_needed | 441 | ··-·no_reboot_needed |
| 478 | ··-·restrict_strategy | 442 | ··-·restrict_strategy |
| 479 | ··-·rpm_verify_permissions | 443 | ··-·rpm_verify_permissions |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1046442/1054521 bytes (99.23%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b530:·736 | 0003b530:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b540:·723e | 0003b540:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b550:· | 0003b550:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b560:·6c6 | 0003b560:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b570:· | 0003b570:·6d31·3630·3822·3e3c·7461·626c·6520·636c··m1608"><table·cl | ||
| 0003b580:· | 0003b580:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b590:· | 0003b590:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b5a0:·6 | 0003b5a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b5b0:·6 | 0003b5b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b5c0:· | 0003b5c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b5d0:· | 0003b5d0:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b5e0:· | 0003b5e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b5f0:· | 0003b5f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b600:· | 0003b600:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b610:· | 0003b610:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b620:·746 | 0003b620:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b630:· | 0003b630:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b640:· | 0003b640:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b650:· | 0003b650:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b660:· | 0003b660:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b670:·6 | 0003b670:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b680:·6 | 0003b680:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b690:· | 0003b690:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b6a0:·66 | 0003b6a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b6b0:·6 | 0003b6b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b6c0:· | 0003b6c0:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b6d0:· | 0003b6d0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b6e0:· | 0003b6e0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b6f0:·5 | 0003b6f0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b700:· | 0003b700:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b710:· | 0003b710:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b720:· | 0003b720:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b730:· | 0003b730:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b740:· | 0003b740:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b750:· | 0003b750:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b760:· | 0003b760:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b770:· | 0003b770:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b780:· | 0003b780:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b790:· | 0003b790:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b7a0:·2 | 0003b7a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b7b0:· | 0003b7b0:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b7c0:· | 0003b7c0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b7d0:·6 | 0003b7d0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b7e0:· | 0003b7e0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b7f0:· | 0003b7f0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b800:·7 | 0003b800:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b810:· | 0003b810:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b820:·2 | 0003b820:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b830:· | 0003b830:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b840:· | 0003b840:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b850:· | 0003b850:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b860:·6c | 0003b860:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b870:· | 0003b870:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b880:· | 0003b880:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b890:· | 0003b890:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b8a0:· | 0003b8a0:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b8b0:·6 | 0003b8b0:·656e·3a0a·2020·2d20·6e6f·7420·2820·226b··en:.··-·not·(·"k | ||
| 0003b8c0:· | 0003b8c0:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | ||
| 0003b8d0:·6 | 0003b8d0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003b8e0:· | 0003b8e0:·2061·6e64·2022·7270·6d2d·6f73·7472·6565···and·"rpm-ostree | ||
| 0003b8f0:·2220·6 | 0003b8f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b900:· | 0003b900:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b910:· | 0003b910:·616e·6420·2262·6f6f·7463·2220·696e·2061··and·"bootc"·in·a | ||
| 0003b920:·6 | 0003b920:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003b930:·6 | 0003b930:·6b61·6765·7320·616e·6420·6e6f·7420·226f··kages·and·not·"o | ||
| 0003b940:· | 0003b940:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b950:· | 0003b950:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003b960:· | 0003b960:·7473·2e70·6163·6b61·6765·730a·2020·2020··ts.packages.···· | ||
| 0003b970:· | 0003b970:·290a·2020·2d20·616e·7369·626c·655f·6469··).··-·ansible_di | ||
| 0003b980:· | 0003b980:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b990:· | 0003b990:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b9a0:·2 | 0003b9a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b9b0:· | 0003b9b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b9c0:· | 0003b9c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b9d0:· | 0003b9d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b9e0:· | 0003b9e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b9f0:· | 0003b9f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003ba00:· | 0003ba00:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003ba10:· | 0003ba10:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003ba20:·2 | 0003ba20:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003ba30:· | 0003ba30:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003ba40:· | 0003ba40:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003ba50:· | 0003ba50:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003ba60:·2 | 0003ba60:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003ba70:· | 0003ba70:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003ba80:· | 0003ba80:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003ba90:·3 | 0003ba90:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003baa0:· | 0003baa0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003bab0:· | 0003bab0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003bac0:· | 0003bac0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003bad0:· | 0003bad0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003bae0:· | 0003bae0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003baf0:· | 0003baf0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003bb00:· | 0003bb00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003bb10:· | 0003bb10:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003bb20:· | 0003bb20:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003bb30:· | 0003bb30:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003bb40:· | 0003bb40:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003bb50:· | 0003bb50:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003bb60:· | 0003bb60:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | ||
| 0003bb70:·2 | 0003bb70:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | ||
| 0003bb80:· | 0003bb80:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003bb90:· | 0003bb90:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003bba0:· | 0003bba0:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | ||
| 0003bbb0:· | 0003bbb0:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | ||
| 0003bbc0:· | 0003bbc0:·0a20·202d·206e·6f74·2028·2022·6b65·726e··.··-·not·(·"kern | ||
| 0003bbd0:· | 0003bbd0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | ||
| 0003bbe0:· | 0003bbe0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | ||
| 0003bbf0:· | 0003bbf0:·6420·2272·706d·2d6f·7374·7265·6522·2069··d·"rpm-ostree"·i | ||
| 0003bc00:·6 | 0003bc00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bc10:· | 0003bc10:·7061·636b·6167·6573·0a20·2020·2061·6e64··packages.····and | ||
| 0003bc20:·202 | 0003bc20:·2022·626f·6f74·6322·2069·6e20·616e·7369···"bootc"·in·ansi | ||
| 0003bc30:· | 0003bc30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bc40:·6 | 0003bc40:·6573·2061·6e64·206e·6f74·2022·6f70·656e··es·and·not·"open | ||
| 0003bc50:·73 | 0003bc50:·7368·6966·742d·6b75·6265·6c65·7422·2069··shift-kubelet"·i | ||
| 0003bc60:· | 0003bc60:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bc70:·61 | 0003bc70:·7061·636b·6167·6573·0a20·2020·2029·0a20··packages.····).· | ||
| 0003bc80:· | 0003bc80:·202d·2061·6e73·6962·6c65·5f64·6973·7472···-·ansible_distr | ||
| Max diff block lines reached; 24765723/24820675 bytes (99.78%) of diff not shown. | |||
| Offset 15203, 408 lines modified | Offset 15203, 408 lines modified | ||
| 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | ||
| 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b690:·696f·6e20· | 0003b690:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b6a0:·20e2 | 0003b6a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b6b0:·2063 | 0003b6b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b6c0:·6 | 0003b6c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b6d0:·2069 | 0003b6d0:·7365·2220·6964·3d22·6964·6d31·3630·3822··se"·id="idm1608" | ||
| 0003b6e0:· | 0003b6e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b6f0:·6 | 0003b6f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b700:·6 | 0003b700:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b710:· | 0003b710:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b720:·6 | 0003b720:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b730:·6 | 0003b730:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b740:· | 0003b740:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b750:· | 0003b750:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b760:· | 0003b760:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b770:·2 | 0003b770:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b780:· | 0003b780:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b790:· | 0003b790:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b7a0:· | 0003b7a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b7b0:· | 0003b7b0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b7c0:· | 0003b7c0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b7d0:·6 | 0003b7d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b7e0:· | 0003b7e0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003b7f0:· | 0003b7f0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003b800:·20 | 0003b800:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003b810:· | 0003b810:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003b820:· | 0003b820:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003b830:· | 0003b830:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003b840:· | 0003b840:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b850:· | 0003b850:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b860:·2 | 0003b860:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b870:· | 0003b870:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b880:· | 0003b880:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b890:· | 0003b890:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b8a0:· | 0003b8a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b8b0:·6 | 0003b8b0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b8c0:· | 0003b8c0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b8d0:·2 | 0003b8d0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b8e0:· | 0003b8e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b8f0:· | 0003b8f0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b900:· | 0003b900:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b910:·2 | 0003b910:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b920:· | 0003b920:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b930:·65 | 0003b930:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b940:· | 0003b940:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b950:· | 0003b950:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b960:· | 0003b960:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b970:·6 | 0003b970:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b980:·7 | 0003b980:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b990:· | 0003b990:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003b9a0:· | 0003b9a0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003b9b0:· | 0003b9b0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003b9c0:· | 0003b9c0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003b9d0:· | 0003b9d0:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003b9e0:· | 0003b9e0:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003b9f0:· | 0003b9f0:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003ba00:· | 0003ba00:·636d·643a·2079·756d·2072·6569·6e73·7461··cmd:·yum·reinsta | ||
| 0003ba10:·6 | 0003ba10:·6c6c·202d·790a·2020·7768·656e·3a0a·2020··ll·-y.··when:.·· | ||
| 0003ba20:· | 0003ba20:·2d20·6e6f·7420·2820·226b·6572·6e65·6c22··-·not·(·"kernel" | ||
| 0003ba30:· | 0003ba30:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003ba40:· | 0003ba40:·732e·7061·636b·6167·6573·2061·6e64·2022··s.packages·and·" | ||
| 0003ba50:· | 0003ba50:·7270·6d2d·6f73·7472·6565·2220·696e·2061··rpm-ostree"·in·a | ||
| 0003ba60:· | 0003ba60:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003ba70:· | 0003ba70:·6b61·6765·730a·2020·2020·616e·6420·2262··kages.····and·"b | ||
| 0003ba80:· | 0003ba80:·6f6f·7463·2220·696e·2061·6e73·6962·6c65··ootc"·in·ansible | ||
| 0003ba90:· | 0003ba90:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003baa0:· | 0003baa0:·616e·6420·6e6f·7420·226f·7065·6e73·6869··and·not·"openshi | ||
| 0003bab0:·6 | 0003bab0:·6674·2d6b·7562·656c·6574·2220·696e·2061··ft-kubelet"·in·a | ||
| 0003bac0:· | 0003bac0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 0003bad0:· | 0003bad0:·6b61·6765·730a·2020·2020·290a·2020·2d20··kages.····).··-· | ||
| 0003bae0:· | 0003bae0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003baf0:· | 0003baf0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003bb00:·6 | 0003bb00:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003bb10:· | 0003bb10:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003bb20:· | 0003bb20:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003bb30:· | 0003bb30:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003bb40:· | 0003bb40:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003bb50:· | 0003bb50:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003bb60:· | 0003bb60:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003bb70:· | 0003bb70:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb80:· | 0003bb80:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003bb90:· | 0003bb90:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003bba0:· | 0003bba0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bbb0:· | 0003bbb0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003bbc0:· | 0003bbc0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003bbd0:· | 0003bbd0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bbe0:·3 | 0003bbe0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003bbf0:· | 0003bbf0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bc00:· | 0003bc00:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bc10:· | 0003bc10:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bc20:· | 0003bc20:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bc30:·6 | 0003bc30:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003bc40:· | 0003bc40:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bc50:· | 0003bc50:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bc60:· | 0003bc60:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bc70:· | 0003bc70:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bc80:· | 0003bc80:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bc90:·2 | 0003bc90:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bca0:· | 0003bca0:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bcb0:· | 0003bcb0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003bcc0:· | 0003bcc0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003bcd0:· | 0003bcd0:·6c20·636f·6d6d·616e·6420·287a·7970·7065··l·command·(zyppe | ||
| 0003bce0:· | 0003bce0:·7229·270a·2020·7365·745f·6661·6374·3a0a··r)'.··set_fact:. | ||
| 0003bcf0:·2 | 0003bcf0:·2020·2020·7061·636b·6167·655f·6d61·6e61······package_mana | ||
| 0003bd00:· | 0003bd00:·6765·725f·7265·696e·7374·616c·6c5f·636d··ger_reinstall_cm | ||
| 0003bd10:· | 0003bd10:·643a·207a·7970·7065·7220·696e·202d·6620··d:·zypper·in·-f· | ||
| 0003bd20:· | 0003bd20:·2d79·0a20·2077·6865·6e3a·0a20·202d·206e··-y.··when:.··-·n | ||
| 0003bd30:· | 0003bd30:·6f74·2028·2022·6b65·726e·656c·2220·696e··ot·(·"kernel"·in | ||
| 0003bd40:·2 | 0003bd40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bd50:· | 0003bd50:·6163·6b61·6765·7320·616e·6420·2272·706d··ackages·and·"rpm | ||
| 0003bd60:·2 | 0003bd60:·2d6f·7374·7265·6522·2069·6e20·616e·7369··-ostree"·in·ansi | ||
| 0003bd70:·6 | 0003bd70:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bd80:· | 0003bd80:·6573·0a20·2020·2061·6e64·2022·626f·6f74··es.····and·"boot | ||
| 0003bd90:·6 | 0003bd90:·6322·2069·6e20·616e·7369·626c·655f·6661··c"·in·ansible_fa | ||
| 0003bda0:· | 0003bda0:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | ||
| 0003bdb0:· | 0003bdb0:·206e·6f74·2022·6f70·656e·7368·6966·742d···not·"openshift- | ||
| 0003bdc0:· | 0003bdc0:·6b75·6265·6c65·7422·2069·6e20·616e·7369··kubelet"·in·ansi | ||
| 0003bdd0:·6 | 0003bdd0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bde0:·0a2 | 0003bde0:·6573·0a20·2020·2029·0a20·202d·2061·6e73··es.····).··-·ans | ||
| 0003bdf0:·6 | 0003bdf0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| Max diff block lines reached; 16165574/16220526 bytes (99.66%) of diff not shown. | |||
| Offset 116, 33 lines modified | Offset 116, 14 lines modified | ||
| 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 125 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 126 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 127 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 128 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 129 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 130 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 131 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 142 | ··package_facts: | 129 | ··package_facts: |
| Offset 309, 14 lines modified | Offset 290, 33 lines modified | ||
| 309 | ··-·PCI-DSSv4-11.5.2 | 290 | ··-·PCI-DSSv4-11.5.2 |
| 310 | ··-·high_complexity | 291 | ··-·high_complexity |
| 311 | ··-·high_severity | 292 | ··-·high_severity |
| 312 | ··-·medium_disruption | 293 | ··-·medium_disruption |
| 313 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 314 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 315 | ··-·rpm_verify_hashes | 296 | ··-·rpm_verify_hashes |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 299 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 300 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 301 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 302 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 303 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 304 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 305 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 306 | fi | ||
| 307 | else | ||
| 308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 309 | fi | ||
| 316 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 317 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 318 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 319 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 320 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 321 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 322 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 335, 46 lines modified | Offset 335, 14 lines modified | ||
| 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 349 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 350 | declare·-A·SETPERMS_RPM_DICT | ||
| 351 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 352 | #·is·expected·by·the·RPM·database | ||
| 353 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 354 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 355 | do | ||
| 356 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 357 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 358 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 359 | done | ||
| 360 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 361 | #·correct·values | ||
| 362 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 363 | do | ||
| 364 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 365 | done | ||
| 366 | else | ||
| 367 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 368 | fi | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 374 | -·name:·Gather·the·package·facts | 347 | -·name:·Gather·the·package·facts |
| 375 | ··package_facts: | 348 | ··package_facts: |
| Offset 482, 14 lines modified | Offset 450, 46 lines modified | ||
| 482 | ··-·PCI-DSSv4-11.5.2 | 450 | ··-·PCI-DSSv4-11.5.2 |
| 483 | ··-·high_complexity | 451 | ··-·high_complexity |
| 484 | ··-·high_severity | 452 | ··-·high_severity |
| 485 | ··-·medium_disruption | 453 | ··-·medium_disruption |
| 486 | ··-·no_reboot_needed | 454 | ··-·no_reboot_needed |
| 487 | ··-·restrict_strategy | 455 | ··-·restrict_strategy |
| 488 | ··-·rpm_verify_ownership | 456 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1124635/1132346 bytes (99.32%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20·4 | 0003b230:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b240:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b250:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b260:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b270:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b280:·3339·3722·3e3c·7461·626c·6520·636c·6173··397"><table·clas | |||
| 0003b290:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d35·3339·3722·3e3c··"·id="idm5397">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b310:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b390:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b3c0:·2069·643d·2269·646d·3533·3938·223e·3c74···id="idm5398"><t | |||
| 0003b3d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b400:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b410:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b300:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b310:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b440:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b320:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b330:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b340:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b | 0003b350:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b480:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b490:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b4a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b4b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b4c0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b4d0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b4e0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b4f0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b500:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b510:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b520:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b530:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b540:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b550:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b560:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b570:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b580:·3339·3922·2074·6162·696e·6465·783d·2230··399"·tabindex="0 | |||
| 0003b590:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b5a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b5b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b5c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b5d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b5e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b5f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b600:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b610:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b620:·7365·2220·6964·3d22·6964·6d35·3339·3922··se"·id="idm5399" | |||
| 0003b630:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b640:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b650:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b660:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b670:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b680:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b | 0003b360:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b370:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b380:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b390:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b3b0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b6a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b6b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b6e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b6f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b700:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b720:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b730:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b740:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b750:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b760:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b770:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b780:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b790:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b7a0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b7b0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b7c0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b7d0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b7e0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b7f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b840:·2223·6964·6d35·3430·3022·2074·6162·696e··"#idm5400"·tabin | |||
| 0003b850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| Max diff block lines reached; 20538454/20562494 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·204 | 0003b280:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b290:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b2a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b2b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b2c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2d0:·646d·3533·3937·223e·3c74·6162·6c65·2063··dm5397"><table·c | |||
| 0003b2e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b300:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b310:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b320:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b330:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b340:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3533·3937··pse"·id="idm5397 | |||
| 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b370:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b400:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b410:·7365·2220·6964·3d22·6964·6d35·3339·3822··se"·id="idm5398" | |||
| 0003b420:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b430:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b440:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b450:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b460:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b350:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b360:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b490:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b370:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b380:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b390:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b3a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b4d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b4e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b500:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b510:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b520:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b530:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b540:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b550:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b560:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b570:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b580:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b590:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b5a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b5b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b5c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b5d0:·646d·3533·3939·2220·7461·6269·6e64·6578··dm5399"·tabindex | |||
| 0003b5e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b600:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b610:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b620:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b630:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b640:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b650:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b660:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b670:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b680:·3939·223e·3c74·6162·6c65·2063·6c61·7373··99"><table·class | |||
| 0003b690:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b6b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b6c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b6d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b6e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b6f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b700:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b710:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b720:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b | 0003b3b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b740:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b750:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b760:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b3c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b3d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b3e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b3f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b400:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b780:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b790:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b7a0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b7b0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003b7c0:·202d·7120·6b65·726e·656c·2d64·6566·6175···-q·kernel-defau | |||
| 0003b7d0:·6c74·3b20·7468·656e·0a0a·7a79·7070·6572··lt;·then..zypper | |||
| 0003b7e0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b7f0:·6522·0a0a·656c·7365·0a20·2020·2026·6774··e"..else.····> | |||
| 0003b800:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b810:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b820:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b830:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b840:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b850:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b860:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b870:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b880:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b890:·6574·3d22·2369·646d·3534·3030·2220·7461··et="#idm5400"·ta | |||
| 0003b8a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b8b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b8c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b8d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b8e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| Max diff block lines reached; 20763031/20787071 bytes (99.88%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·204 | 0003b1a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b1b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b1c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1f0:·3533·3937·223e·3c74·6162·6c65·2063·6c61··5397"><table·cla | |||
| 0003b200:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b210:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b220:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b230:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b240:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b260:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3533·3937·223e··e"·id="idm5397"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b280:·6172·6765·743d·2223·6964·6d35·3339·3822··arget="#idm5398" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b300:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b310:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b320:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b330:·2220·6964·3d22·6964·6d35·3339·3822·3e3c··"·id="idm5398">< | |||
| 0003b340:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b350:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b360:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b370:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b380:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b270:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b280:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b3b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b3c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003b290:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b2a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b3f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b400:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b410:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b420:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b430:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b440:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b450:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b460:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b470:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b480:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b490:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b4a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b4b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b4c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b4d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b4e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b4f0:·3533·3939·2220·7461·6269·6e64·6578·3d22··5399"·tabindex=" | |||
| 0003b500:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b510:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b520:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b530:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b540:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b550:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b560:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b570:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b580:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b590:·7073·6522·2069·643d·2269·646d·3533·3939··pse"·id="idm5399 | |||
| 0003b5a0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5b0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5c0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5d0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5e0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b5f0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b600:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b610:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b620:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b630:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b640:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b2d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b2e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b2f0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b300:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b310:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b320:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b660:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b670:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b680:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b690:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b6a0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b6b0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b6c0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b6d0:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003b6e0:·7120·6b65·726e·656c·2d64·6566·6175·6c74··q·kernel-default | |||
| 0003b6f0:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b700:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b710:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b720:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b730:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b740:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b750:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b760:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b770:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b780:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b790:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b7a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b7b0:·3d22·2369·646d·3534·3030·2220·7461·6269··="#idm5400"·tabi | |||
| 0003b7c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b7d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b7e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| Max diff block lines reached; 8258944/8282984 bytes (99.71%) of diff not shown. | |||
| Offset 122, 44 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 135 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 162, 44 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 164 | ··-·low_complexity |
| 195 | ··-·low_disruption | 165 | ··-·low_disruption |
| 196 | ··-·medium_severity | 166 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 197 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 29 lines modified | Offset 227, 14 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 249 | -·name:·Gather·the·package·facts | 239 | -·name:·Gather·the·package·facts |
| 250 | ··package_facts: | 240 | ··package_facts: |
| Offset 362, 14 lines modified | Offset 347, 29 lines modified | ||
| 362 | ··-·PCI-DSSv4-11.5.2 | 347 | ··-·PCI-DSSv4-11.5.2 |
| 363 | ··-·aide_build_database | 348 | ··-·aide_build_database |
| 364 | ··-·low_complexity | 349 | ··-·low_complexity |
| 365 | ··-·low_disruption | 350 | ··-·low_disruption |
| 366 | ··-·medium_severity | 351 | ··-·medium_severity |
| 367 | ··-·no_reboot_needed | 352 | ··-·no_reboot_needed |
| 368 | ··-·restrict_strategy | 353 | ··-·restrict_strategy |
| Max diff block lines reached; 956759/961786 bytes (99.48%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·4 | 00039d60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3131·3622·3e3c··"·id="idm8116">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3131·3722·2074·6162·696e·6465··idm8117"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 00039 | 00039d70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00039ed0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039ee0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039ef0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039f00:·6d38·3131·3722·3e3c·7461·626c·6520·636c··m8117"><table·cl | |||
| 00039f10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039f20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039f30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039f40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039f50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039f60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039f70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039f80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039fa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039fb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039fc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039fd0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039fe0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039ff0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003a000:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003a010:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003a020:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003a030:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003a040:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003a050:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003a060:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003a070:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003a080:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a090:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a0a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a0b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a0d0:·6964·6d38·3131·3822·2074·6162·696e·6465··idm8118"·tabinde | |||
| 0003a0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a130:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a140:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003 | 00039d80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 00039d90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 00039da0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 00039db0:·3131·3622·3e3c·7461·626c·6520·636c·6173··116"><table·clas | ||
| 0003 | 00039dc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 00039dd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 00039de0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 00039df0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 00039e00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 00039e10:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039e20:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 00039e30:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 00039e40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 00039e50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 00039e60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 00039e70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 00039e80:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 00039e90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 00039ea0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003a280:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a290:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a2a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a2b0:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a2c0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003 | 00039eb0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 00039ec0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039ed0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039ee0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039ef0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039f00:·2d39·3134·3736·2d32·0a20·202d·2065·6e61··-91476-2.··-·ena | |||
| 00039f10:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039f20:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039f30:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039f40:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039f50:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039f60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039f70:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039f80:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039f90:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039fa0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 00039fb0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039fc0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039fd0:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039fe0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039ff0:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a000:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a010:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a020:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a030:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a040:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a050:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a060:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a070:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a080:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a090:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a0a0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a0b0:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| Max diff block lines reached; 2132398/2157542 bytes (98.83%) of diff not shown. | |||
| Offset 88, 45 lines modified | Offset 88, 14 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | include·install_dnf-automatic | ||
| 105 | class·install_dnf-automatic·{ | ||
| 106 | ··package·{·'dnf-automatic': | ||
| 107 | ····ensure·=>·'installed', | ||
| 108 | ··} | ||
| 109 | } | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 116 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 117 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | zypper·install·-y·"dnf-automatic" | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 100 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 101 | ··package_facts: |
| Offset 153, 14 lines modified | Offset 122, 45 lines modified | ||
| 153 | ··-·CCE-91476-2 | 122 | ··-·CCE-91476-2 |
| 154 | ··-·enable_strategy | 123 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 124 | ··-·low_complexity |
| 156 | ··-·low_disruption | 125 | ··-·low_disruption |
| 157 | ··-·medium_severity | 126 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 127 | ··-·no_reboot_needed |
| 159 | ··-·package_dnf-automatic_installed | 128 | ··-·package_dnf-automatic_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 140 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | zypper·install·-y·"dnf-automatic" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_dnf-automatic | ||
| 151 | class·install_dnf-automatic·{ | ||
| 152 | ··package·{·'dnf-automatic': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 162 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 163 | automatic.conf. | 159 | automatic.conf. |
| 164 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 165 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 161 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 166 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 162 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 57 lines modified | Offset 171, 14 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91474-7 | 172 | Identifiers:·CCE-91474-7 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| Max diff block lines reached; 163954/169429 bytes (96.77%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20·4 | 0003b480:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b490:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b4a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4d0:·6d35·3339·3722·3e3c·7461·626c·6520·636c··m5397"><table·cl | |||
| 0003b4e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b500:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b510:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b520:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b530:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b540:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d35·3339·3722··se"·id="idm5397" | |||
| 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3533·3938··target="#idm5398 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b5e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b600:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b610:·6522·2069·643d·2269·646d·3533·3938·223e··e"·id="idm5398"> | |||
| 0003b620:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b630:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b640:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b650:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b660:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b550:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b560:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b690:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b6a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003b570:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b580:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b590:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b5a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b6d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b700:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b710:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b720:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b730:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b740:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b750:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b760:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b770:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b780:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b790:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7d0:·6d35·3339·3922·2074·6162·696e·6465·783d··m5399"·tabindex= | |||
| 0003b7e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b7f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b800:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b810:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b820:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b830:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b840:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b850:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b860:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b870:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b880:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b890:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b8d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b8e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b920:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b | 0003b5b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b5c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b5d0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b5e0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b5f0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b600:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b940:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b950:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b960:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b970:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b980:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b990:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b9a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b9b0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b9c0:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b9d0:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b9e0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b9f0:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003ba00:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003ba10:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003ba20:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003ba30:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003ba40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba90:·743d·2223·6964·6d35·3430·3022·2074·6162··t="#idm5400"·tab | |||
| 0003baa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bab0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bac0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| Max diff block lines reached; 19674368/19698408 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b330:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b340:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b350:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b360:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b370:·2269·646d·3533·3937·223e·3c74·6162·6c65··"idm5397"><table | |||
| 0003b380:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b390:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b3b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b3f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b380:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b410:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b480:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b490:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4b0:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b4c0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b4d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b500:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b510:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b400:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b530:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b410:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b420:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b560:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b570:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b580:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b590:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5b0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b5c0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b5d0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b5e0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b5f0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b600:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b610:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b620:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b630:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b640:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b650:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b660:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b670:·2369·646d·3533·3939·2220·7461·6269·6e64··#idm5399"·tabind | |||
| 0003b680:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b690:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b6c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b6d0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b6e0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b6f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b700:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b710:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b720:·3533·3939·223e·3c74·6162·6c65·2063·6c61··5399"><table·cla | |||
| 0003b730:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b740:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b750:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b760:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b770:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b780:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b790:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b7a0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b7c0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b7d0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b7e0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b7f0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b810:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b820:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b830:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b840:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b850:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 0003b860:·6574·202d·7120·6b65·726e·656c·2d64·6566··et·-q·kernel-def | |||
| 0003b870:·6175·6c74·3b20·7468·656e·0a0a·7a79·7070··ault;·then..zypp | |||
| 0003b880:·6572·2069·6e73·7461·6c6c·202d·7920·2261··er·install·-y·"a | |||
| 0003b890:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b8a0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b8b0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b8c0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b8d0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b8e0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b8f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b900:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b910:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b920:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b930:·7267·6574·3d22·2369·646d·3534·3030·2220··rget="#idm5400"· | |||
| 0003b940:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b950:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b960:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b970:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b980:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b990:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b9a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b9b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| Max diff block lines reached; 8627600/8651640 bytes (99.72%) of diff not shown. | |||
| Offset 125, 44 lines modified | Offset 125, 14 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 154 | zypper·install·-y·"aide" | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 164 | ··package_facts: | 138 | ··package_facts: |
| Offset 195, 14 lines modified | Offset 165, 44 lines modified | ||
| 195 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 196 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 197 | ··-·low_complexity | 167 | ··-·low_complexity |
| 198 | ··-·low_disruption | 168 | ··-·low_disruption |
| 199 | ··-·medium_severity | 169 | ··-·medium_severity |
| 200 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 201 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 183 | zypper·install·-y·"aide" | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | include·install_aide | ||
| 193 | class·install_aide·{ | ||
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 204 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 206 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 207 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 208 | generated·database·can·be·installed·as·follows: | 204 | generated·database·can·be·installed·as·follows: |
| Offset 230, 29 lines modified | Offset 230, 14 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 252 | -·name:·Gather·the·package·facts | 242 | -·name:·Gather·the·package·facts |
| 253 | ··package_facts: | 243 | ··package_facts: |
| Offset 365, 14 lines modified | Offset 350, 29 lines modified | ||
| 365 | ··-·PCI-DSSv4-11.5.2 | 350 | ··-·PCI-DSSv4-11.5.2 |
| 366 | ··-·aide_build_database | 351 | ··-·aide_build_database |
| 367 | ··-·low_complexity | 352 | ··-·low_complexity |
| 368 | ··-·low_disruption | 353 | ··-·low_disruption |
| 369 | ··-·medium_severity | 354 | ··-·medium_severity |
| 370 | ··-·no_reboot_needed | 355 | ··-·no_reboot_needed |
| 371 | ··-·restrict_strategy | 356 | ··-·restrict_strategy |
| Max diff block lines reached; 1037955/1043104 bytes (99.51%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b250:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3533·3937·223e·3c70·7265·3e3c·636f·6465··5397"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d35·3339·3822·2074·6162·696e·6465·783d··m5398"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b3a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b3d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b3e0:·3339·3822·3e3c·7461·626c·6520·636c·6173··398"><table·clas | |||
| 0003b3f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b400:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b410:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b420:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003b290:·643d·2269·646d·3533·3937·223e·3c74·6162··d="idm5397"><tab | ||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b450:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b480:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b490:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b4a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b4b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b4c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b4d0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b4e0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b4f0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b500:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b510:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b520:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b530:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b540:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b550:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b560:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b570:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b590:·3d22·2369·646d·3533·3939·2220·7461·6269··="#idm5399"·tabi | |||
| 0003b5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b5f0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b600:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b640:·646d·3533·3939·223e·3c74·6162·6c65·2063··dm5399"><table·c | |||
| 0003b650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b6d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b6e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b700:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b71 | 0003b360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b370:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b380:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b390:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b3a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b3b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b3c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b3d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b740:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b750:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b760:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b770:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | |||
| 0003b780:·7569·6574·202d·7120·6b65·726e·656c·2d64··uiet·-q·kernel-d | |||
| 0003b790:·6566·6175·6c74·3b20·7468·656e·0a0a·7a79··efault;·then..zy | |||
| 0003b7a0:·7070·6572·2069·6e73·7461·6c6c·202d·7920··pper·install·-y· | |||
| 0003b7b0:·2261·6964·6522·0a0a·656c·7365·0a20·2020··"aide"..else.··· | |||
| 0003b7c0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b7d0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b7e0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b7f0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b800:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b810:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b820:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b830:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b840:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b850:·7461·7267·6574·3d22·2369·646d·3534·3030··target="#idm5400 | |||
| 0003b860:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b870:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b880:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b890:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b8a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| Max diff block lines reached; 8369921/8393961 bytes (99.71%) of diff not shown. | |||
| Offset 122, 44 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 135 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 162, 44 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 164 | ··-·low_complexity |
| 195 | ··-·low_disruption | 165 | ··-·low_disruption |
| 196 | ··-·medium_severity | 166 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 197 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 200 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 205 | generated·database·can·be·installed·as·follows: | 201 | generated·database·can·be·installed·as·follows: |
| Offset 227, 29 lines modified | Offset 227, 14 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 249 | -·name:·Gather·the·package·facts | 239 | -·name:·Gather·the·package·facts |
| 250 | ··package_facts: | 240 | ··package_facts: |
| Offset 362, 14 lines modified | Offset 347, 29 lines modified | ||
| 362 | ··-·PCI-DSSv4-11.5.2 | 347 | ··-·PCI-DSSv4-11.5.2 |
| 363 | ··-·aide_build_database | 348 | ··-·aide_build_database |
| 364 | ··-·low_complexity | 349 | ··-·low_complexity |
| 365 | ··-·low_disruption | 350 | ··-·low_disruption |
| 366 | ··-·medium_severity | 351 | ··-·medium_severity |
| 367 | ··-·no_reboot_needed | 352 | ··-·no_reboot_needed |
| 368 | ··-·restrict_strategy | 353 | ··-·restrict_strategy |
| Max diff block lines reached; 1009689/1014838 bytes (99.49%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b400:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b410:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b420:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b430:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b440:·6964·6d35·3339·3722·3e3c·7461·626c·6520··idm5397"><table· | |||
| 0003b450:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b460:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b470:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b480:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b490:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b450:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b4e0:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b580:·7073·6522·2069·643d·2269·646d·3533·3938··pse"·id="idm5398 | |||
| 0003b590:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b4c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b4d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b600:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b4e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b4f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b500:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b630:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b640:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b650:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b660:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b670:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b680:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b690:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b6a0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b6b0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b6c0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b6d0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b6e0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b6f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b700:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b710:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b720:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b730:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b740:·6964·6d35·3339·3922·2074·6162·696e·6465··idm5399"·tabinde | |||
| 0003b750:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b760:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b770:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b780:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b790:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b7a0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b7b0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b7c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b7e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b7f0:·3339·3922·3e3c·7461·626c·6520·636c·6173··399"><table·clas | |||
| 0003b800:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b810:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b820:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b830:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b840:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b850:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b860:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b870:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b880:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b890:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b8a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b8b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b8c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b8d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b8e0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b8f0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b900:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b910:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b920:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003b930:·7420·2d71·206b·6572·6e65·6c2d·6465·6661··t·-q·kernel-defa | |||
| 0003b940:·756c·743b·2074·6865·6e0a·0a7a·7970·7065··ult;·then..zyppe | |||
| 0003b950:·7220·696e·7374·616c·6c20·2d79·2022·6169··r·install·-y·"ai | |||
| 0003b960:·6465·220a·0a65·6c73·650a·2020·2020·2667··de"..else.····&g | |||
| 0003b970:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b980:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b990:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b9a0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b9b0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b9c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b9d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b9e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b9f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba00:·6765·743d·2223·6964·6d35·3430·3022·2074··get="#idm5400"·t | |||
| 0003ba10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ba60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ba70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ba80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ba90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 19591547/19615587 bytes (99.88%) of diff not shown. | |||
| Offset 15218, 414 lines modified | Offset 15218, 414 lines modified | ||
| 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | ||
| 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b780:·7469·6f6e·20 | 0003b780:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b790:·7420 | 0003b790:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b7a0:·7620 | 0003b7a0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b7b0:·6 | 0003b7b0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b7c0:·2220 | 0003b7c0:·7073·6522·2069·643d·2269·646d·3530·3536··pse"·id="idm5056 | ||
| 0003b7d0:· | 0003b7d0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b7e0:· | 0003b7e0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b7f0:·6 | 0003b7f0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b800:· | 0003b800:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b810:·6 | 0003b810:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b820:· | 0003b820:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b830:· | 0003b830:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b840:·7 | 0003b840:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b850:· | 0003b850:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b860:·3 | 0003b860:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b870:· | 0003b870:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b880:· | 0003b880:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b890:· | 0003b890:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b8a0:·7 | 0003b8a0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b8b0:· | 0003b8b0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b8c0:·6 | 0003b8c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b8d0:· | 0003b8d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003b8e0:·6 | 0003b8e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003b8f0:· | 0003b8f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003b900:· | 0003b900:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003b910:· | 0003b910:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003b920:· | 0003b920:·4343·452d·3931·3633·322d·300a·2020·2d20··CCE-91632-0.··-· | ||
| 0003b930:· | 0003b930:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003b940:· | 0003b940:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b950:· | 0003b950:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b960:· | 0003b960:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b970:· | 0003b970:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b980:· | 0003b980:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b990:· | 0003b990:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b9a0:· | 0003b9a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b9b0:· | 0003b9b0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b9c0:·2 | 0003b9c0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b9d0:· | 0003b9d0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b9e0:· | 0003b9e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b9f0:·2 | 0003b9f0:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003ba00:· | 0003ba00:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003ba10:· | 0003ba10:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003ba20:· | 0003ba20:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003ba30:· | 0003ba30:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003ba40:· | 0003ba40:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003ba50:· | 0003ba50:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003ba60:· | 0003ba60:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003ba70:· | 0003ba70:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003ba80:· | 0003ba80:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003ba90:·6 | 0003ba90:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003baa0:· | 0003baa0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bab0:· | 0003bab0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003bac0:· | 0003bac0:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003bad0:· | 0003bad0:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003bae0:· | 0003bae0:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003baf0:·6 | 0003baf0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003bb00:· | 0003bb00:·5f63·6d64·3a20·7a79·7070·6572·2072·6569··_cmd:·zypper·rei | ||
| 0003bb10:·646 | 0003bb10:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003bb20:· | 0003bb20:·3a0a·2020·2d20·6e6f·7420·2820·226b·6572··:.··-·not·(·"ker | ||
| 0003bb30:· | 0003bb30:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | ||
| 0003bb40:·6 | 0003bb40:·6661·6374·732e·7061·636b·6167·6573·2061··facts.packages·a | ||
| 0003bb50:·20 | 0003bb50:·6e64·2022·7270·6d2d·6f73·7472·6565·2220··nd·"rpm-ostree"· | ||
| 0003bb60:·6 | 0003bb60:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bb70:· | 0003bb70:·2e70·6163·6b61·6765·730a·2020·2020·616e··.packages.····an | ||
| 0003bb80:·6 | 0003bb80:·6420·2262·6f6f·7463·2220·696e·2061·6e73··d·"bootc"·in·ans | ||
| 0003bb90:· | 0003bb90:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bba0:· | 0003bba0:·6765·7320·616e·6420·6e6f·7420·226f·7065··ges·and·not·"ope | ||
| 0003bbb0:·6 | 0003bbb0:·6e73·6869·6674·2d6b·7562·656c·6574·2220··nshift-kubelet"· | ||
| 0003bbc0:·6 | 0003bbc0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003bbd0:· | 0003bbd0:·2e70·6163·6b61·6765·730a·2020·2020·290a··.packages.····). | ||
| 0003bbe0:· | 0003bbe0:·2020·2d20·616e·7369·626c·655f·6469·7374····-·ansible_dist | ||
| 0003bbf0:· | 0003bbf0:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003bc00:·6 | 0003bc00:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003bc10:· | 0003bc10:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003bc20:·6 | 0003bc20:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003bc30:· | 0003bc30:·6773·3a0a·2020·2d20·4343·452d·3931·3633··gs:.··-·CCE-9163 | ||
| 0003bc40:· | 0003bc40:·322d·300a·2020·2d20·434a·4953·2d35·2e31··2-0.··-·CJIS-5.1 | ||
| 0003bc50:· | 0003bc50:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003bc60:·3 | 0003bc60:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003bc70:· | 0003bc70:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003bc80:· | 0003bc80:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bc90:· | 0003bc90:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003bca0:· | 0003bca0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bcb0:· | 0003bcb0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003bcc0:· | 0003bcc0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bcd0:· | 0003bcd0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bce0:· | 0003bce0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bcf0:· | 0003bcf0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003bd00:· | 0003bd00:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003bd10:· | 0003bd10:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bd20:· | 0003bd20:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bd30:· | 0003bd30:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bd40:·6 | 0003bd40:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bd50:· | 0003bd50:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bd60:·0a20·202d·20 | 0003bd60:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bd70:· | 0003bd70:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bd80:· | 0003bd80:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bd90:· | 0003bd90:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bda0:· | 0003bda0:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bdb0:· | 0003bdb0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bdc0:·2 | 0003bdc0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003bdd0:· | 0003bdd0:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003bde0:· | 0003bde0:·7374·616c·6c20·636f·6d6d·616e·6420·287a··stall·command·(z | ||
| 0003bdf0:· | 0003bdf0:·7970·7065·7229·270a·2020·7365·745f·6661··ypper)'.··set_fa | ||
| 0003be00:· | 0003be00:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003be10:· | 0003be10:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003be20:· | 0003be20:·6c5f·636d·643a·207a·7970·7065·7220·696e··l_cmd:·zypper·in | ||
| 0003be30:· | 0003be30:·202d·6620·2d79·0a20·2077·6865·6e3a·0a20···-f·-y.··when:.· | ||
| 0003be40:·2 | 0003be40:·202d·206e·6f74·2028·2022·6b65·726e·656c···-·not·(·"kernel | ||
| 0003be50:·2 | 0003be50:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003be60:· | 0003be60:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003be70:· | 0003be70:·2272·706d·2d6f·7374·7265·6522·2069·6e20··"rpm-ostree"·in· | ||
| 0003be80:·6 | 0003be80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003be90:· | 0003be90:·636b·6167·6573·0a20·2020·2061·6e64·2022··ckages.····and·" | ||
| 0003bea0:·6 | 0003bea0:·626f·6f74·6322·2069·6e20·616e·7369·626c··bootc"·in·ansibl | ||
| 0003beb0:· | 0003beb0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 0003bec0:· | 0003bec0:·2061·6e64·206e·6f74·2022·6f70·656e·7368···and·not·"opensh | ||
| 0003bed0:· | 0003bed0:·6966·742d·6b75·6265·6c65·7422·2069·6e20··ift-kubelet"·in· | ||
| 0003bee0:· | 0003bee0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| Max diff block lines reached; 18534927/18590707 bytes (99.70%) of diff not shown. | |||
| Offset 134, 36 lines modified | Offset 134, 14 lines modified | ||
| 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 135 | ····························A.14.2.3,·A.14.2.4 | 135 | ····························A.14.2.3,·A.14.2.4 |
| 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 144 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 145 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 146 | get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 150 | new·line | ||
| 151 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 152 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 162 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 163 | ··package_facts: | 147 | ··package_facts: |
| Offset 336, 14 lines modified | Offset 314, 36 lines modified | ||
| 336 | ··-·PCI-DSSv4-11.5.2 | 314 | ··-·PCI-DSSv4-11.5.2 |
| 337 | ··-·high_complexity | 315 | ··-·high_complexity |
| 338 | ··-·high_severity | 316 | ··-·high_severity |
| 339 | ··-·medium_disruption | 317 | ··-·medium_disruption |
| 340 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 341 | ··-·restrict_strategy | 319 | ··-·restrict_strategy |
| 342 | ··-·rpm_verify_hashes | 320 | ··-·rpm_verify_hashes |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 323 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 324 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 325 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 326 | get·files·names | ||
| 327 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 328 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 329 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 330 | new·line | ||
| 331 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 332 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 333 | fi | ||
| 334 | else | ||
| 335 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 336 | fi | ||
| 343 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 337 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 344 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 338 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 345 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 339 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 346 | which·can·be·found·with: | 340 | which·can·be·found·with: |
| 347 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 348 | run·the·following·command·to·determine·which·package·owns·it: | 342 | run·the·following·command·to·determine·which·package·owns·it: |
| 349 | $·rpm·-qf·FILENAME | 343 | $·rpm·-qf·FILENAME |
| Offset 425, 53 lines modified | Offset 425, 14 lines modified | ||
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 429 | ····························SRG-OS-000278-GPOS-00108 | 429 | ····························SRG-OS-000278-GPOS-00108 |
| 430 | ·············_\x8c_\x8i_\x8s············6.1.1 | 430 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 437 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 438 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 439 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 440 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 441 | declare·-A·SETPERMS_RPM_DICT | ||
| 442 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 443 | #·is·expected·by·the·RPM·database | ||
| 444 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 445 | $NF·}') | ||
| 446 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 447 | do | ||
| 448 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 449 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 450 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 451 | ········do | ||
| 452 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 453 | duplicates. | ||
| 454 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 455 | ········done | ||
| 456 | done | ||
| 457 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 458 | #·correct·values | ||
| 459 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 460 | do | ||
| 461 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 462 | done | ||
| 463 | else | ||
| 464 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 465 | fi | ||
| 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 471 | -·name:·Gather·the·package·facts | 437 | -·name:·Gather·the·package·facts |
| 472 | ··package_facts: | 438 | ··package_facts: |
| Max diff block lines reached; 1469747/1475400 bytes (99.62%) of diff not shown. | |||
| Offset 15163, 415 lines modified | Offset 15163, 415 lines modified | ||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | ||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b410:·656d·6564·6961·7469·6f6e·20 | 0003b410:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b420:·2073·6 | 0003b420:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b430:·6272 | 0003b430:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b440:· | 0003b440:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b450:·6 | 0003b450:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b460:· | 0003b460:·646d·3530·3536·223e·3c74·6162·6c65·2063··dm5056"><table·c | ||
| 0003b470:· | 0003b470:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b480:· | 0003b480:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b490:·2 | 0003b490:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b4a0:·6 | 0003b4a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b4b0:· | 0003b4b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b4c0:· | 0003b4c0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b4d0:· | 0003b4d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b4e0:· | 0003b4e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b4f0:· | 0003b4f0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b500:· | 0003b500:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b510:· | 0003b510:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b520:· | 0003b520:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b530:·74 | 0003b530:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b540:· | 0003b540:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b550:· | 0003b550:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b560:·666 | 0003b560:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003b570:·7 | 0003b570:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003b580:· | 0003b580:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003b590:· | 0003b590:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003b5a0:·6 | 0003b5a0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003b5b0:· | 0003b5b0:·3a0a·2020·2d20·4343·452d·3931·3633·322d··:.··-·CCE-91632- | ||
| 0003b5c0:· | 0003b5c0:·300a·2020·2d20·434a·4953·2d35·2e31·302e··0.··-·CJIS-5.10. | ||
| 0003b5d0:· | 0003b5d0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b5e0:· | 0003b5e0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b5f0:· | 0003b5f0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b600:· | 0003b600:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b610:· | 0003b610:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b620:· | 0003b620:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b630:· | 0003b630:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b640:· | 0003b640:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b650:· | 0003b650:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b660:· | 0003b660:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b670:· | 0003b670:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b680:· | 0003b680:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b690:· | 0003b690:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b6a0:· | 0003b6a0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b6b0:· | 0003b6b0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b6c0:·6 | 0003b6c0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b6d0:· | 0003b6d0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b6e0:·2 | 0003b6e0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003b6f0:· | 0003b6f0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003b700:·6 | 0003b700:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003b710:· | 0003b710:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003b720:· | 0003b720:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003b730:· | 0003b730:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003b740:·5 | 0003b740:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003b750:·6 | 0003b750:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003b760:· | 0003b760:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003b770:·6 | 0003b770:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b780:· | 0003b780:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b790:·6 | 0003b790:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | ||
| 0003b7a0:·6 | 0003b7a0:·6572·2072·6569·6e73·7461·6c6c·202d·790a··er·reinstall·-y. | ||
| 0003b7b0:·2 | 0003b7b0:·2020·7768·656e·3a0a·2020·2d20·6e6f·7420····when:.··-·not· | ||
| 0003b7c0:· | 0003b7c0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | ||
| 0003b7d0:· | 0003b7d0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003b7e0:·6 | 0003b7e0:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | ||
| 0003b7f0:· | 0003b7f0:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | ||
| 0003b800:· | 0003b800:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b810:·2 | 0003b810:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | ||
| 0003b820:· | 0003b820:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 0003b830:· | 0003b830:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | ||
| 0003b840:· | 0003b840:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | ||
| 0003b850:· | 0003b850:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | ||
| 0003b860:· | 0003b860:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | ||
| 0003b870:· | 0003b870:·2020·2020·290a·2020·2d20·616e·7369·626c······).··-·ansibl | ||
| 0003b880:·6 | 0003b880:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003b890:·6 | 0003b890:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003b8a0:·6 | 0003b8a0:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003b8b0:· | 0003b8b0:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003b8c0:· | 0003b8c0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | ||
| 0003b8d0:· | 0003b8d0:·452d·3931·3633·322d·300a·2020·2d20·434a··E-91632-0.··-·CJ | ||
| 0003b8e0:· | 0003b8e0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b8f0:· | 0003b8f0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b900:· | 0003b900:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b910:· | 0003b910:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b920:· | 0003b920:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b930:· | 0003b930:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b940:·3 | 0003b940:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b950:· | 0003b950:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b960:· | 0003b960:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b970:·3 | 0003b970:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b980:· | 0003b980:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b990:· | 0003b990:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b9a0:· | 0003b9a0:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b9b0:· | 0003b9b0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b9c0:· | 0003b9c0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b9d0:· | 0003b9d0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b9e0:· | 0003b9e0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b9f0:· | 0003b9f0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003ba00:· | 0003ba00:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003ba10:· | 0003ba10:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003ba20:· | 0003ba20:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003ba30:· | 0003ba30:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003ba40:· | 0003ba40:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003ba50:· | 0003ba50:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003ba60:· | 0003ba60:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003ba70:· | 0003ba70:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003ba80:· | 0003ba80:·616e·6420·287a·7970·7065·7229·270a·2020··and·(zypper)'.·· | ||
| 0003ba90:· | 0003ba90:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003baa0:· | 0003baa0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003bab0:· | 0003bab0:·696e·7374·616c·6c5f·636d·643a·207a·7970··install_cmd:·zyp | ||
| 0003bac0:· | 0003bac0:·7065·7220·696e·202d·6620·2d79·0a20·2077··per·in·-f·-y.··w | ||
| 0003bad0:· | 0003bad0:·6865·6e3a·0a20·202d·206e·6f74·2028·2022··hen:.··-·not·(·" | ||
| 0003bae0:· | 0003bae0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | ||
| 0003baf0:· | 0003baf0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003bb00:· | 0003bb00:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | ||
| 0003bb10:· | 0003bb10:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | ||
| 0003bb20:·6 | 0003bb20:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | ||
| 0003bb30:· | 0003bb30:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | ||
| 0003bb40:· | 0003bb40:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003bb50:· | 0003bb50:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | ||
| 0003bb60:·7 | 0003bb60:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003bb70:· | 0003bb70:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| Max diff block lines reached; 17192083/17248001 bytes (99.68%) of diff not shown. | |||
| Offset 124, 36 lines modified | Offset 124, 14 lines modified | ||
| 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 125 | ····························A.14.2.3,·A.14.2.4 | 125 | ····························A.14.2.3,·A.14.2.4 |
| 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 134 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 135 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 136 | get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 140 | new·line | ||
| 141 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 142 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 152 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 153 | ··package_facts: | 137 | ··package_facts: |
| Offset 326, 14 lines modified | Offset 304, 36 lines modified | ||
| 326 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 327 | ··-·high_complexity | 305 | ··-·high_complexity |
| 328 | ··-·high_severity | 306 | ··-·high_severity |
| 329 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 330 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 331 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 332 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 314 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 315 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 316 | get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 320 | new·line | ||
| 321 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 322 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 323 | fi | ||
| 324 | else | ||
| 325 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 326 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 328 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 329 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 336 | which·can·be·found·with: | 330 | which·can·be·found·with: |
| 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 331 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 338 | run·the·following·command·to·determine·which·package·owns·it: | 332 | run·the·following·command·to·determine·which·package·owns·it: |
| 339 | $·rpm·-qf·FILENAME | 333 | $·rpm·-qf·FILENAME |
| Offset 415, 53 lines modified | Offset 415, 14 lines modified | ||
| 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 419 | ····························SRG-OS-000278-GPOS-00108 | 419 | ····························SRG-OS-000278-GPOS-00108 |
| 420 | ·············_\x8c_\x8i_\x8s············6.1.1 | 420 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 427 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 428 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 429 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 430 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 431 | declare·-A·SETPERMS_RPM_DICT | ||
| 432 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 433 | #·is·expected·by·the·RPM·database | ||
| 434 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 435 | $NF·}') | ||
| 436 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 437 | do | ||
| 438 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 439 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 440 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 441 | ········do | ||
| 442 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 443 | duplicates. | ||
| 444 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 445 | ········done | ||
| 446 | done | ||
| 447 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 448 | #·correct·values | ||
| 449 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 450 | do | ||
| 451 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 452 | done | ||
| 453 | else | ||
| 454 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 455 | fi | ||
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 461 | -·name:·Gather·the·package·facts | 427 | -·name:·Gather·the·package·facts |
| 462 | ··package_facts: | 428 | ··package_facts: |
| Max diff block lines reached; 1288259/1293912 bytes (99.56%) of diff not shown. | |||
| Offset 14957, 120 lines modified | Offset 14957, 120 lines modified | ||
| 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | ||
| 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a730:·223e·5265·6d65·6469·6174·696f·6e20· | 0003a730:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003a740:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a750:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a760:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a770:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a780:·3d22·6964·6d32·3436·3035·223e·3c74·6162··="idm24605"><tab | |||
| 0003a790:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a7a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a7b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a7c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a7d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a7e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a7f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a800:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a740:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003a750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a780:·646d·3234·3630·3522·3e3c·7461·626c·6520··dm24605"><table· | |||
| 0003a790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003a7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003a7b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003a7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003a7d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a7f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003a800:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a810:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003a830:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a840:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003a850:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | |||
| 0003a860:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | |||
| 0003a870:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a880:·6f64·653e·6368·6772·7020·3020·2f65·7463··ode>chgrp·0·/etc | |||
| 0003a890:·2f70·6173·7377·640a·3c2f·636f·6465·3e3c··/passwd.</code>< | |||
| 0003a8a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a8b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a8c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a8d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a8e0:·612d·7461·7267·6574·3d22·2369·646d·3234··a-target="#idm24 | |||
| 0003a8f0:·3630·3622·2074·6162·696e·6465·783d·2230··606"·tabindex="0 | |||
| 0003a900:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a910:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a920:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a930:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a940:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a950:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a960:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a970:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a980:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a990:·6c61·7073·6522·2069·643d·2269·646d·3234··lapse"·id="idm24 | |||
| 0003a9a0:·3630·3622·3e3c·7461·626c·6520·636c·6173··606"><table·clas | |||
| 0003a9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a | 0003a810:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003aa10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003a820:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003a830:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a | 0003a840:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003a850:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a860:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003a870:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a880:·3e3c·636f·6465·3e2d·206e·616d·653a·2054··><code>-·name:·T | |||
| 0003a890:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | |||
| 0003aa40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003aa50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003aa60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003aa70:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | |||
| 0003aa80:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | |||
| 0003aa90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003aaa0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | |||
| 0003aab0:·2065·7869·7374·656e·6365·202f·6574·632f···existence·/etc/ | |||
| 0003aac0:·7061·7373·7764·0a20·2073·7461·743a·0a20··passwd.··stat:.· | |||
| 0003aad0:·2020·2070·6174·683a·202f·6574·632f·7061·····path:·/etc/pa | |||
| 0003aae0:·7373·7764·0a20·2072·6567·6973·7465·723a··sswd.··register: | |||
| 0003aaf0:·2066·696c·655f·6578·6973·7473·0a20·2074···file_exists.··t | |||
| 0003ab00:·6167·733a·0a20·202d·2043·4345·2d39·3136··ags:.··-·CCE-916 | |||
| 0003ab10:·3237·2d30·0a20·202d·2043·4a49·532d·352e··27-0.··-·CJIS-5. | |||
| 0003ab20:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | |||
| 0003ab30:·3030·2d35·332d·4143·2d36·2831·290a·2020··00-53-AC-6(1).·· | |||
| 0003ab40:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003ab50:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003ab60:·532d·5265·712d·382e·372e·630a·2020·2d20··S-Req-8.7.c.··-· | |||
| 0003ab70:·5043·492d·4453·5376·342d·322e·320a·2020··PCI-DSSv4-2.2.·· | |||
| 0003ab80:·2d20·5043·492d·4453·5376·342d·322e·322e··-·PCI-DSSv4-2.2. | |||
| 0003ab90:·360a·2020·2d20·636f·6e66·6967·7572·655f··6.··-·configure_ | |||
| 0003aba0:·7374·7261·7465·6779·0a20·202d·2066·696c··strategy.··-·fil | |||
| 0003abb0:·655f·6772·6f75·706f·776e·6572·5f65·7463··e_groupowner_etc | |||
| 0003abc0:·5f70·6173·7377·640a·2020·2d20·6c6f·775f··_passwd.··-·low_ | |||
| 0003abd0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003abe0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003abf0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003ac00:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003ac10:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | |||
| 0003ac20:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | |||
| 0003ac30:·6572·2030·206f·6e20·2f65·7463·2f70·6173··er·0·on·/etc/pas | |||
| 0003ac40:·7377·640a·2020·6669·6c65·3a0a·2020·2020··swd.··file:.···· | |||
| 0003ac50:·7061·7468·3a20·2f65·7463·2f70·6173·7377··path:·/etc/passw | |||
| 0003ac60:·640a·2020·2020·6772·6f75·703a·2027·3027··d.····group:·'0' | |||
| 0003ac70:·0a20·2077·6865·6e3a·2066·696c·655f·6578··.··when:·file_ex | |||
| 0003ac80:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def | |||
| 0003ac90:·696e·6564·2061·6e64·2066·696c·655f·6578··ined·and·file_ex | |||
| 0003aca0:·6973·7473·2e73·7461·742e·6578·6973·7473··ists.stat.exists | |||
| 0003acb0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003acc0:·2d39·3136·3237·2d30·0a20·202d·2043·4a49··-91627-0.··-·CJI | |||
| 0003acd0:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | |||
| 0003ace0:·5354·2d38·3030·2d35·332d·4143·2d36·2831··ST-800-53-AC-6(1 | |||
| 0003acf0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003ad00:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003ad10:·492d·4453·532d·5265·712d·382e·372e·630a··I-DSS-Req-8.7.c. | |||
| 0003ad20:·2020·2d20·5043·492d·4453·5376·342d·322e····-·PCI-DSSv4-2. | |||
| 0003ad30:·320a·2020·2d20·5043·492d·4453·5376·342d··2.··-·PCI-DSSv4- | |||
| 0003ad40:·322e·322e·360a·2020·2d20·636f·6e66·6967··2.2.6.··-·config | |||
| 0003ad50:·7572·655f·7374·7261·7465·6779·0a20·202d··ure_strategy.··- | |||
| 0003ad60:·2066·696c·655f·6772·6f75·706f·776e·6572···file_groupowner | |||
| 0003a | 0003a8a0:·6520·2f65·7463·2f70·6173·7377·640a·2020··e·/etc/passwd.·· | ||
| Max diff block lines reached; 31934/47142 bytes (67.74%) of diff not shown. | |||
| Offset 108, 20 lines modified | Offset 108, 14 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.2 | 112 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 120 | chgrp·0·/etc/passwd | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 126 | -·name:·Test·for·existence·/etc/passwd | 120 | -·name:·Test·for·existence·/etc/passwd |
| 127 | ··stat: | 121 | ··stat: |
| Offset 157, 14 lines modified | Offset 151, 20 lines modified | ||
| 157 | ··-·PCI-DSSv4-2.2.6 | 151 | ··-·PCI-DSSv4-2.2.6 |
| 158 | ··-·configure_strategy | 152 | ··-·configure_strategy |
| 159 | ··-·file_groupowner_etc_passwd | 153 | ··-·file_groupowner_etc_passwd |
| 160 | ··-·low_complexity | 154 | ··-·low_complexity |
| 161 | ··-·low_disruption | 155 | ··-·low_disruption |
| 162 | ··-·medium_severity | 156 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 163 | chgrp·0·/etc/passwd | ||
| 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 166 | $·sudo·chown·root·/etc/passwd | 166 | $·sudo·chown·root·/etc/passwd |
| 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are | 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for | 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 169 | ·············system·security. | 169 | ·············system·security. |
| 170 | Severity: ···medium | 170 | Severity: ···medium |
| Offset 187, 20 lines modified | Offset 187, 14 lines modified | ||
| 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 191 | ·············_\x8c_\x8i_\x8s············6.1.2 | 191 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 199 | chown·0·/etc/passwd | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 205 | -·name:·Test·for·existence·/etc/passwd | 199 | -·name:·Test·for·existence·/etc/passwd |
| 206 | ··stat: | 200 | ··stat: |
| Offset 236, 14 lines modified | Offset 230, 20 lines modified | ||
| 236 | ··-·PCI-DSSv4-2.2.6 | 230 | ··-·PCI-DSSv4-2.2.6 |
| 237 | ··-·configure_strategy | 231 | ··-·configure_strategy |
| 238 | ··-·file_owner_etc_passwd | 232 | ··-·file_owner_etc_passwd |
| 239 | ··-·low_complexity | 233 | ··-·low_complexity |
| 240 | ··-·low_disruption | 234 | ··-·low_disruption |
| 241 | ··-·medium_severity | 235 | ··-·medium_severity |
| 242 | ··-·no_reboot_needed | 236 | ··-·no_reboot_needed |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 242 | chown·0·/etc/passwd | ||
| 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 245 | $·sudo·chmod·0644·/etc/passwd | 245 | $·sudo·chmod·0644·/etc/passwd |
| 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the | 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the |
| 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and | 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and |
| 249 | ·············protection·of·this·file·is·critical·for·system·security. | 249 | ·············protection·of·this·file·is·critical·for·system·security. |
| Offset 267, 24 lines modified | Offset 267, 14 lines modified | ||
| 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 271 | ·············_\x8c_\x8i_\x8s············6.1.2 | 271 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 279 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 285 | -·name:·Test·for·existence·/etc/passwd | 279 | -·name:·Test·for·existence·/etc/passwd |
| 286 | ··stat: | 280 | ··stat: |
| Offset 320, 11 lines modified | Offset 310, 21 lines modified | ||
| 320 | ··-·PCI-DSSv4-2.2.6 | 310 | ··-·PCI-DSSv4-2.2.6 |
| 321 | ··-·configure_strategy | 311 | ··-·configure_strategy |
| 322 | ··-·file_permissions_etc_passwd | 312 | ··-·file_permissions_etc_passwd |
| 323 | ··-·low_complexity | 313 | ··-·low_complexity |
| 324 | ··-·low_disruption | 314 | ··-·low_disruption |
| 325 | ··-·medium_severity | 315 | ··-·medium_severity |
| 326 | ··-·no_reboot_needed | 316 | ··-·no_reboot_needed |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 322 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 327 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 323 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5465 bytes (2.31%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0d0:·2269·646d·3533·3937·223e·3c74·6162·6c65··"idm5397"><table | |||
| 0003b0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b0e0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b170:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b220:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b270:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b290:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b2c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b310:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b320:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b330:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b340:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b350:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b360:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b370:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b380:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b390:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b3a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b3b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b3c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b3d0:·2369·646d·3533·3939·2220·7461·6269·6e64··#idm5399"·tabind | |||
| 0003b3e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b3f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b400:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b410:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b420:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b430:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b440:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b450:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b460:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b470:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b480:·3533·3939·223e·3c74·6162·6c65·2063·6c61··5399"><table·cla | |||
| 0003b490:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b4a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b4b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b4c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b4d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b4e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b4f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b500:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b510:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b520:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b530:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b550:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b560:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b570:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b580:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b590:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b5a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b5b0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 0003b5c0:·6574·202d·7120·6b65·726e·656c·2d64·6566··et·-q·kernel-def | |||
| 0003b5d0:·6175·6c74·3b20·7468·656e·0a0a·7a79·7070··ault;·then..zypp | |||
| 0003b5e0:·6572·2069·6e73·7461·6c6c·202d·7920·2261··er·install·-y·"a | |||
| 0003b5f0:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b600:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b610:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b620:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b630:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b640:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b650:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b660:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b670:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b680:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b690:·7267·6574·3d22·2369·646d·3534·3030·2220··rget="#idm5400"· | |||
| 0003b6a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b6b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b6c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b6d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b6e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b6f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b700:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b710:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| Max diff block lines reached; 19946281/19970321 bytes (99.88%) of diff not shown. | |||
| Offset 114, 44 lines modified | Offset 114, 14 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 143 | zypper·install·-y·"aide" | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 153 | ··package_facts: | 127 | ··package_facts: |
| Offset 184, 14 lines modified | Offset 154, 44 lines modified | ||
| 184 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 185 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 186 | ··-·low_complexity | 156 | ··-·low_complexity |
| 187 | ··-·low_disruption | 157 | ··-·low_disruption |
| 188 | ··-·medium_severity | 158 | ··-·medium_severity |
| 189 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 190 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 172 | zypper·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 188 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/bin/aide·--init | 189 | $·sudo·/usr/bin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 196 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 192 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 197 | generated·database·can·be·installed·as·follows: | 193 | generated·database·can·be·installed·as·follows: |
| Offset 219, 29 lines modified | Offset 219, 14 lines modified | ||
| 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 229 | zypper·-q·--no-remote·ref | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Gather·the·package·facts | 231 | -·name:·Gather·the·package·facts |
| 242 | ··package_facts: | 232 | ··package_facts: |
| Offset 354, 14 lines modified | Offset 339, 29 lines modified | ||
| 354 | ··-·PCI-DSSv4-11.5.2 | 339 | ··-·PCI-DSSv4-11.5.2 |
| 355 | ··-·aide_build_database | 340 | ··-·aide_build_database |
| 356 | ··-·low_complexity | 341 | ··-·low_complexity |
| 357 | ··-·low_disruption | 342 | ··-·low_disruption |
| 358 | ··-·medium_severity | 343 | ··-·medium_severity |
| 359 | ··-·no_reboot_needed | 344 | ··-·no_reboot_needed |
| 360 | ··-·restrict_strategy | 345 | ··-·restrict_strategy |
| Max diff block lines reached; 1475054/1480211 bytes (99.65%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20·4 | 0003b230:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b240:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b250:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b260:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b270:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b280:·3336·3122·3e3c·7461·626c·6520·636c·6173··361"><table·clas | |||
| 0003b290:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d36·3336·3122·3e3c··"·id="idm6361">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b310:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b390:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b3c0:·2069·643d·2269·646d·3633·3632·223e·3c74···id="idm6362"><t | |||
| 0003b3d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b400:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b410:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b300:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b310:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b440:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b320:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b330:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b340:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b | 0003b350:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b480:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b490:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b4a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b4b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b4c0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b4d0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b4e0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b4f0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b500:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b510:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b520:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b530:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b540:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b550:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b560:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b570:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b580:·3336·3322·2074·6162·696e·6465·783d·2230··363"·tabindex="0 | |||
| 0003b590:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b5a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b5b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b5c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b5d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b5e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b5f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b600:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b610:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b620:·7365·2220·6964·3d22·6964·6d36·3336·3322··se"·id="idm6363" | |||
| 0003b630:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b640:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b650:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b660:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b670:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b680:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b | 0003b360:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b370:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b380:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b390:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b3b0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b6a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b6b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b6e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b6f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b700:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b720:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b730:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b740:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b750:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b760:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b770:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b780:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b790:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b7a0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b7b0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b7c0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b7d0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b7e0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b7f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b840:·2223·6964·6d36·3336·3422·2074·6162·696e··"#idm6364"·tabin | |||
| 0003b850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| Max diff block lines reached; 20637704/20661744 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·204 | 0003b280:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b290:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b2a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b2b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b2c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2d0:·646d·3633·3631·223e·3c74·6162·6c65·2063··dm6361"><table·c | |||
| 0003b2e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b300:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b310:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b320:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b330:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b340:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3633·3631··pse"·id="idm6361 | |||
| 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d36·3336··-target="#idm636 | |||
| 0003b370:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b400:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b410:·7365·2220·6964·3d22·6964·6d36·3336·3222··se"·id="idm6362" | |||
| 0003b420:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b430:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b440:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b450:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b460:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b350:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b360:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b490:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b370:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b380:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b390:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b3a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b4d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b4e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b500:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b510:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b520:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b530:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b540:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b550:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b560:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b570:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b580:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b590:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b5a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b5b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b5c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b5d0:·646d·3633·3633·2220·7461·6269·6e64·6578··dm6363"·tabindex | |||
| 0003b5e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b600:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b610:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b620:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b630:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b640:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b650:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b660:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b670:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b680:·3633·223e·3c74·6162·6c65·2063·6c61·7373··63"><table·class | |||
| 0003b690:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b6b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b6c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b6d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b6e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b6f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b700:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b710:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b720:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b | 0003b3b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b740:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b750:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b760:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b3c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b3d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b3e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b3f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b400:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b780:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003b790:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003b7a0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003b7b0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003b7c0:·202d·7120·6b65·726e·656c·2d64·6566·6175···-q·kernel-defau | |||
| 0003b7d0:·6c74·3b20·7468·656e·0a0a·7a79·7070·6572··lt;·then..zypper | |||
| 0003b7e0:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003b7f0:·6522·0a0a·656c·7365·0a20·2020·2026·6774··e"..else.····> | |||
| 0003b800:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b810:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b820:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b830:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b840:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b850:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b860:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b870:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b880:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b890:·6574·3d22·2369·646d·3633·3634·2220·7461··et="#idm6364"·ta | |||
| 0003b8a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b8b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b8c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b8d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b8e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| Max diff block lines reached; 20959385/20983425 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·204 | 0003b1a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b1b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b1c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1f0:·3633·3631·223e·3c74·6162·6c65·2063·6c61··6361"><table·cla | |||
| 0003b200:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b210:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b220:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b230:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b240:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b260:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3633·3631·223e··e"·id="idm6361"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b280:·6172·6765·743d·2223·6964·6d36·3336·3222··arget="#idm6362" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b300:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b310:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b320:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b330:·2220·6964·3d22·6964·6d36·3336·3222·3e3c··"·id="idm6362">< | |||
| 0003b340:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b350:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b360:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b370:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b380:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b270:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b280:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b3b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b3c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003b290:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b2a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b3f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b400:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b410:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b420:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b430:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b440:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b450:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b460:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b470:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b480:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b490:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b4a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b4b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b4c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b4d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b4e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b4f0:·3633·3633·2220·7461·6269·6e64·6578·3d22··6363"·tabindex=" | |||
| 0003b500:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b510:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b520:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b530:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b540:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b550:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b560:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b570:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b580:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b590:·7073·6522·2069·643d·2269·646d·3633·3633··pse"·id="idm6363 | |||
| 0003b5a0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5b0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5c0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5d0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5e0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b5f0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b600:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b610:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b620:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b630:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b640:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b2d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b2e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b2f0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b300:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b310:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b320:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b660:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b670:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b680:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b690:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b6a0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b6b0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b6c0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b6d0:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003b6e0:·7120·6b65·726e·656c·2d64·6566·6175·6c74··q·kernel-default | |||
| 0003b6f0:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003b700:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003b710:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003b720:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003b730:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003b740:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003b750:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003b760:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b770:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b780:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b790:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b7a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b7b0:·3d22·2369·646d·3633·3634·2220·7461·6269··="#idm6364"·tabi | |||
| 0003b7c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b7d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b7e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| Max diff block lines reached; 8223547/8247587 bytes (99.71%) of diff not shown. | |||
| Offset 122, 44 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 135 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 162, 44 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 164 | ··-·low_complexity |
| 195 | ··-·low_disruption | 165 | ··-·low_disruption |
| 196 | ··-·medium_severity | 166 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 197 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 29 lines modified | Offset 227, 14 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 249 | -·name:·Gather·the·package·facts | 239 | -·name:·Gather·the·package·facts |
| 250 | ··package_facts: | 240 | ··package_facts: |
| Offset 362, 14 lines modified | Offset 347, 29 lines modified | ||
| 362 | ··-·PCI-DSSv4-11.5.2 | 347 | ··-·PCI-DSSv4-11.5.2 |
| 363 | ··-·aide_build_database | 348 | ··-·aide_build_database |
| 364 | ··-·low_complexity | 349 | ··-·low_complexity |
| 365 | ··-·low_disruption | 350 | ··-·low_disruption |
| 366 | ··-·medium_severity | 351 | ··-·medium_severity |
| 367 | ··-·no_reboot_needed | 352 | ··-·no_reboot_needed |
| 368 | ··-·restrict_strategy | 353 | ··-·restrict_strategy |
| Max diff block lines reached; 952860/957887 bytes (99.48%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·4 | 00039d60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3931·3622·3e3c··"·id="idm8916">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3931·3722·2074·6162·696e·6465··idm8917"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 00039 | 00039d70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00039ed0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039ee0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039ef0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039f00:·6d38·3931·3722·3e3c·7461·626c·6520·636c··m8917"><table·cl | |||
| 00039f10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039f20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039f30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039f40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039f50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039f60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039f70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039f80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039fa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039fb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039fc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039fd0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039fe0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039ff0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003a000:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003a010:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003a020:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003a030:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003a040:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003a050:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003a060:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003a070:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003a080:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a090:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a0a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a0b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a0d0:·6964·6d38·3931·3822·2074·6162·696e·6465··idm8918"·tabinde | |||
| 0003a0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a130:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a140:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003 | 00039d80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 00039d90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 00039da0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 00039db0:·3931·3622·3e3c·7461·626c·6520·636c·6173··916"><table·clas | ||
| 0003 | 00039dc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 00039dd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 00039de0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 00039df0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 00039e00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 00039e10:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 00039e20:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 00039e30:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 00039e40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 00039e50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 00039e60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 00039e70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 00039e80:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 00039e90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 00039ea0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003a280:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a290:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a2a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a2b0:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a2c0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003 | 00039eb0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 00039ec0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039ed0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039ee0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039ef0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039f00:·2d39·3131·3633·2d36·0a20·202d·2065·6e61··-91163-6.··-·ena | |||
| 00039f10:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039f20:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039f30:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039f40:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039f50:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039f60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039f70:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039f80:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039f90:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039fa0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 00039fb0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039fc0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039fd0:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039fe0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039ff0:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a000:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a010:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a020:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a030:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a040:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a050:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a060:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a070:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a080:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a090:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a0a0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a0b0:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| Max diff block lines reached; 2118046/2143190 bytes (98.83%) of diff not shown. | |||
| Offset 88, 45 lines modified | Offset 88, 14 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | include·install_dnf-automatic | ||
| 105 | class·install_dnf-automatic·{ | ||
| 106 | ··package·{·'dnf-automatic': | ||
| 107 | ····ensure·=>·'installed', | ||
| 108 | ··} | ||
| 109 | } | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 116 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 117 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | zypper·install·-y·"dnf-automatic" | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 100 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 101 | ··package_facts: |
| Offset 153, 14 lines modified | Offset 122, 45 lines modified | ||
| 153 | ··-·CCE-91163-6 | 122 | ··-·CCE-91163-6 |
| 154 | ··-·enable_strategy | 123 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 124 | ··-·low_complexity |
| 156 | ··-·low_disruption | 125 | ··-·low_disruption |
| 157 | ··-·medium_severity | 126 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 127 | ··-·no_reboot_needed |
| 159 | ··-·package_dnf-automatic_installed | 128 | ··-·package_dnf-automatic_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 140 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | zypper·install·-y·"dnf-automatic" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_dnf-automatic | ||
| 151 | class·install_dnf-automatic·{ | ||
| 152 | ··package·{·'dnf-automatic': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 162 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 163 | automatic.conf. | 159 | automatic.conf. |
| 164 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 165 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 161 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 166 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 162 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 57 lines modified | Offset 171, 14 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91165-1 | 172 | Identifiers:·CCE-91165-1 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| Max diff block lines reached; 163682/169157 bytes (96.76%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20·4 | 0003b480:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b490:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b4a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4d0:·6d36·3336·3122·3e3c·7461·626c·6520·636c··m6361"><table·cl | |||
| 0003b4e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b500:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b510:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b520:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b530:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b540:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d36·3336·3122··se"·id="idm6361" | |||
| 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3633·3632··target="#idm6362 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b5e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b600:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b610:·6522·2069·643d·2269·646d·3633·3632·223e··e"·id="idm6362"> | |||
| 0003b620:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b630:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b640:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b650:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b660:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b550:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003b560:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b690:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b6a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003b570:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b580:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b590:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b5a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b6d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b700:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b710:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b720:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b730:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b740:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b750:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b760:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b770:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b780:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b790:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7d0:·6d36·3336·3322·2074·6162·696e·6465·783d··m6363"·tabindex= | |||
| 0003b7e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b7f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b800:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b810:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b820:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b830:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b840:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b850:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b860:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b870:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b880:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b890:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b8d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b8e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b920:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b | 0003b5b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b5c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b5d0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b5e0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b5f0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b600:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b940:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b950:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b960:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b970:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b980:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b990:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b9a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b9b0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b9c0:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b9d0:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b9e0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b9f0:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003ba00:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003ba10:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003ba20:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003ba30:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003ba40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba90:·743d·2223·6964·6d36·3336·3422·2074·6162··t="#idm6364"·tab | |||
| 0003baa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bab0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bac0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| Max diff block lines reached; 20233361/20257401 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b330:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b340:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b350:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b360:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b370:·2269·646d·3633·3631·223e·3c74·6162·6c65··"idm6361"><table | |||
| 0003b380:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b390:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b3b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b3f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b380:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b410:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b480:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b490:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4b0:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b4c0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b4d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b500:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b510:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b400:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b530:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b410:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b420:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b560:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b570:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b580:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b590:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5a0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5b0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b5c0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b5d0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b5e0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b5f0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b600:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b610:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b620:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b630:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b640:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b650:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b660:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b670:·2369·646d·3633·3633·2220·7461·6269·6e64··#idm6363"·tabind | |||
| 0003b680:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b690:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b6a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b6b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b6c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b6d0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b6e0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b6f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b700:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b710:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b720:·3633·3633·223e·3c74·6162·6c65·2063·6c61··6363"><table·cla | |||
| 0003b730:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b740:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b750:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b760:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b770:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b780:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b790:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b7a0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b7c0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b7d0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b7e0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b7f0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b810:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b820:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b830:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b840:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b850:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 0003b860:·6574·202d·7120·6b65·726e·656c·2d64·6566··et·-q·kernel-def | |||
| 0003b870:·6175·6c74·3b20·7468·656e·0a0a·7a79·7070··ault;·then..zypp | |||
| 0003b880:·6572·2069·6e73·7461·6c6c·202d·7920·2261··er·install·-y·"a | |||
| 0003b890:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b8a0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b8b0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b8c0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b8d0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b8e0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b8f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b900:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b910:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b920:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b930:·7267·6574·3d22·2369·646d·3633·3634·2220··rget="#idm6364"· | |||
| 0003b940:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b950:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b960:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b970:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b980:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b990:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b9a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b9b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| Max diff block lines reached; 9079329/9103369 bytes (99.74%) of diff not shown. | |||
| Offset 125, 44 lines modified | Offset 125, 14 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 154 | zypper·install·-y·"aide" | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 164 | ··package_facts: | 138 | ··package_facts: |
| Offset 195, 14 lines modified | Offset 165, 44 lines modified | ||
| 195 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 196 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 197 | ··-·low_complexity | 167 | ··-·low_complexity |
| 198 | ··-·low_disruption | 168 | ··-·low_disruption |
| 199 | ··-·medium_severity | 169 | ··-·medium_severity |
| 200 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 201 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 183 | zypper·install·-y·"aide" | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | include·install_aide | ||
| 193 | class·install_aide·{ | ||
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 204 | $·sudo·/usr/bin/aide·--init | 200 | $·sudo·/usr/bin/aide·--init |
| 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 206 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 207 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 208 | generated·database·can·be·installed·as·follows: | 204 | generated·database·can·be·installed·as·follows: |
| Offset 230, 29 lines modified | Offset 230, 14 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 252 | -·name:·Gather·the·package·facts | 242 | -·name:·Gather·the·package·facts |
| 253 | ··package_facts: | 243 | ··package_facts: |
| Offset 365, 14 lines modified | Offset 350, 29 lines modified | ||
| 365 | ··-·PCI-DSSv4-11.5.2 | 350 | ··-·PCI-DSSv4-11.5.2 |
| 366 | ··-·aide_build_database | 351 | ··-·aide_build_database |
| 367 | ··-·low_complexity | 352 | ··-·low_complexity |
| 368 | ··-·low_disruption | 353 | ··-·low_disruption |
| 369 | ··-·medium_severity | 354 | ··-·medium_severity |
| 370 | ··-·no_reboot_needed | 355 | ··-·no_reboot_needed |
| 371 | ··-·restrict_strategy | 356 | ··-·restrict_strategy |
| Max diff block lines reached; 1085144/1090306 bytes (99.53%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b250:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3633·3631·223e·3c70·7265·3e3c·636f·6465··6361"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d36·3336·3222·2074·6162·696e·6465·783d··m6362"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b3a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b3d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b3e0:·3336·3222·3e3c·7461·626c·6520·636c·6173··362"><table·clas | |||
| 0003b3f0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b400:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b410:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b420:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003b290:·643d·2269·646d·3633·3631·223e·3c74·6162··d="idm6361"><tab | ||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b450:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b480:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b490:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b4a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b4b0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b4c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b4d0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b4e0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b4f0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b500:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b510:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b520:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b530:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b540:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b550:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b560:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b570:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b590:·3d22·2369·646d·3633·3633·2220·7461·6269··="#idm6363"·tabi | |||
| 0003b5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b5f0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003b600:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003b610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b640:·646d·3633·3633·223e·3c74·6162·6c65·2063··dm6363"><table·c | |||
| 0003b650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b6d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b6e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b700:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b71 | 0003b360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b370:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b380:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b390:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b3a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b3b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b3c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b3d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b740:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b750:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b760:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b770:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | |||
| 0003b780:·7569·6574·202d·7120·6b65·726e·656c·2d64··uiet·-q·kernel-d | |||
| 0003b790:·6566·6175·6c74·3b20·7468·656e·0a0a·7a79··efault;·then..zy | |||
| 0003b7a0:·7070·6572·2069·6e73·7461·6c6c·202d·7920··pper·install·-y· | |||
| 0003b7b0:·2261·6964·6522·0a0a·656c·7365·0a20·2020··"aide"..else.··· | |||
| 0003b7c0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b7d0:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b7e0:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b7f0:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003b800:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003b810:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b820:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b830:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b840:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b850:·7461·7267·6574·3d22·2369·646d·3633·3634··target="#idm6364 | |||
| 0003b860:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b870:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b880:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b890:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b8a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| Max diff block lines reached; 8816747/8840787 bytes (99.73%) of diff not shown. | |||
| Offset 122, 44 lines modified | Offset 122, 14 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 161 | ··package_facts: | 135 | ··package_facts: |
| Offset 192, 14 lines modified | Offset 162, 44 lines modified | ||
| 192 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 193 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 194 | ··-·low_complexity | 164 | ··-·low_complexity |
| 195 | ··-·low_disruption | 165 | ··-·low_disruption |
| 196 | ··-·medium_severity | 166 | ··-·medium_severity |
| 197 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 198 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/bin/aide·--init | 197 | $·sudo·/usr/bin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 200 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 205 | generated·database·can·be·installed·as·follows: | 201 | generated·database·can·be·installed·as·follows: |
| Offset 227, 29 lines modified | Offset 227, 14 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 249 | -·name:·Gather·the·package·facts | 239 | -·name:·Gather·the·package·facts |
| 250 | ··package_facts: | 240 | ··package_facts: |
| Offset 362, 14 lines modified | Offset 347, 29 lines modified | ||
| 362 | ··-·PCI-DSSv4-11.5.2 | 347 | ··-·PCI-DSSv4-11.5.2 |
| 363 | ··-·aide_build_database | 348 | ··-·aide_build_database |
| 364 | ··-·low_complexity | 349 | ··-·low_complexity |
| 365 | ··-·low_disruption | 350 | ··-·low_disruption |
| 366 | ··-·medium_severity | 351 | ··-·medium_severity |
| 367 | ··-·no_reboot_needed | 352 | ··-·no_reboot_needed |
| 368 | ··-·restrict_strategy | 353 | ··-·restrict_strategy |
| Max diff block lines reached; 1054472/1059634 bytes (99.51%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b400:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b410:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b420:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b430:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b440:·6964·6d36·3336·3122·3e3c·7461·626c·6520··idm6361"><table· | |||
| 0003b450:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b460:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b470:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b480:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b490:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b450:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | |||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b4e0:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b580:·7073·6522·2069·643d·2269·646d·3633·3632··pse"·id="idm6362 | |||
| 0003b590:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b4c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b4d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b600:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b4e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b4f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b500:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b630:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b640:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b650:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b660:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b670:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b680:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b690:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b6a0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b6b0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b6c0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b6d0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b6e0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b6f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b700:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b710:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b720:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b730:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b740:·6964·6d36·3336·3322·2074·6162·696e·6465··idm6363"·tabinde | |||
| 0003b750:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b760:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b770:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b780:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b790:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b7a0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b7b0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b7c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b7d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b7e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b7f0:·3336·3322·3e3c·7461·626c·6520·636c·6173··363"><table·clas | |||
| 0003b800:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b810:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b820:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b830:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b840:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b850:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b860:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b870:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b880:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b890:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b8a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b8b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b8c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b8d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b8e0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b8f0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b900:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b910:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b920:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003b930:·7420·2d71·206b·6572·6e65·6c2d·6465·6661··t·-q·kernel-defa | |||
| 0003b940:·756c·743b·2074·6865·6e0a·0a7a·7970·7065··ult;·then..zyppe | |||
| 0003b950:·7220·696e·7374·616c·6c20·2d79·2022·6169··r·install·-y·"ai | |||
| 0003b960:·6465·220a·0a65·6c73·650a·2020·2020·2667··de"..else.····&g | |||
| 0003b970:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b980:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b990:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b9a0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b9b0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b9c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b9d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b9e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b9f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ba00:·6765·743d·2223·6964·6d36·3336·3422·2074··get="#idm6364"·t | |||
| 0003ba10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ba20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ba30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ba40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ba50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ba60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ba70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ba80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ba90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| Max diff block lines reached; 20150678/20174718 bytes (99.88%) of diff not shown. | |||
| Offset 15209, 415 lines modified | Offset 15209, 415 lines modified | ||
| 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | ||
| 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b6f0:·6564·6961·7469·6f6e·20 | 0003b6f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b700:· | 0003b700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b710:·3e3c | 0003b710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b720:· | 0003b720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b730:·6170 | 0003b730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b740:·302 | 0003b740:·3630·3230·223e·3c74·6162·6c65·2063·6c61··6020"><table·cla | ||
| 0003b750:· | 0003b750:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b760:·7 | 0003b760:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b770:· | 0003b770:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b780:· | 0003b780:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b790:· | 0003b790:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b7a0:· | 0003b7a0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b7b0:· | 0003b7b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b7c0:·7 | 0003b7c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b7d0:· | 0003b7d0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b7e0:· | 0003b7e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b7f0:·6 | 0003b7f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b800:· | 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b810:· | 0003b810:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b820:·65 | 0003b820:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b830:· | 0003b830:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b840:·6 | 0003b840:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b850:·6 | 0003b850:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b860:· | 0003b860:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b870:· | 0003b870:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b880:·7 | 0003b880:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b890:·2 | 0003b890:·2020·2d20·4343·452d·3835·3738·382d·380a····-·CCE-85788-8. | ||
| 0003b8a0:· | 0003b8a0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b8b0:· | 0003b8b0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003b8c0:· | 0003b8c0:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003b8d0:· | 0003b8d0:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003b8e0:· | 0003b8e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b8f0:· | 0003b8f0:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003b900:·2 | 0003b900:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003b910:· | 0003b910:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b920:· | 0003b920:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003b930:· | 0003b930:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003b940:· | 0003b940:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b950:· | 0003b950:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003b960:· | 0003b960:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003b970:· | 0003b970:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003b980:· | 0003b980:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003b990:· | 0003b990:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003b9a0:·6 | 0003b9a0:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003b9b0:· | 0003b9b0:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003b9c0:· | 0003b9c0:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003b9d0:·6 | 0003b9d0:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003b9e0:· | 0003b9e0:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003b9f0:· | 0003b9f0:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003ba00:· | 0003ba00:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003ba10:· | 0003ba10:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003ba20:· | 0003ba20:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003ba30:· | 0003ba30:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003ba40:·6 | 0003ba40:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003ba50:· | 0003ba50:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003ba60:· | 0003ba60:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003ba70:· | 0003ba70:·7461·6c6c·5f63·6d64·3a20·7a79·7070·6572··tall_cmd:·zypper | ||
| 0003ba80:· | 0003ba80:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003ba90:·6 | 0003ba90:·7768·656e·3a0a·2020·2d20·6e6f·7420·2820··when:.··-·not·(· | ||
| 0003baa0:·2 | 0003baa0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | ||
| 0003bab0:· | 0003bab0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 0003bac0:· | 0003bac0:·6573·2061·6e64·2022·7270·6d2d·6f73·7472··es·and·"rpm-ostr | ||
| 0003bad0:· | 0003bad0:·6565·2220·696e·2061·6e73·6962·6c65·5f66··ee"·in·ansible_f | ||
| 0003bae0:·6 | 0003bae0:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003baf0:· | 0003baf0:·2020·616e·6420·2262·6f6f·7463·2220·696e····and·"bootc"·in | ||
| 0003bb00:· | 0003bb00:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 0003bb10:·6 | 0003bb10:·6163·6b61·6765·7320·616e·6420·6e6f·7420··ackages·and·not· | ||
| 0003bb20:· | 0003bb20:·226f·7065·6e73·6869·6674·2d6b·7562·656c··"openshift-kubel | ||
| 0003bb30:· | 0003bb30:·6574·2220·696e·2061·6e73·6962·6c65·5f66··et"·in·ansible_f | ||
| 0003bb40:· | 0003bb40:·6163·7473·2e70·6163·6b61·6765·730a·2020··acts.packages.·· | ||
| 0003bb50:· | 0003bb50:·2020·290a·2020·2d20·616e·7369·626c·655f····).··-·ansible_ | ||
| 0003bb60:·6 | 0003bb60:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003bb70:· | 0003bb70:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003bb80:· | 0003bb80:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003bb90:· | 0003bb90:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003bba0:· | 0003bba0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | ||
| 0003bbb0:· | 0003bbb0:·3835·3738·382d·380a·2020·2d20·434a·4953··85788-8.··-·CJIS | ||
| 0003bbc0:· | 0003bbc0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003bbd0:· | 0003bbd0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003bbe0:· | 0003bbe0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bbf0:· | 0003bbf0:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003bc00:· | 0003bc00:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003bc10:· | 0003bc10:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bc20:· | 0003bc20:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003bc30:· | 0003bc30:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003bc40:· | 0003bc40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bc50:· | 0003bc50:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003bc60:·3 | 0003bc60:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bc70:· | 0003bc70:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bc80:·72 | 0003bc80:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bc90:·2 | 0003bc90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bca0:· | 0003bca0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bcb0:· | 0003bcb0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bcc0:· | 0003bcc0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bcd0:· | 0003bcd0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bce0:· | 0003bce0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bcf0:· | 0003bcf0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bd00:· | 0003bd00:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bd10:· | 0003bd10:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bd20:· | 0003bd20:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bd30:· | 0003bd30:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003bd40:· | 0003bd40:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003bd50:· | 0003bd50:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003bd60:· | 0003bd60:·6420·287a·7970·7065·7229·270a·2020·7365··d·(zypper)'.··se | ||
| 0003bd70:· | 0003bd70:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003bd80:· | 0003bd80:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003bd90:· | 0003bd90:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | ||
| 0003bda0:· | 0003bda0:·7220·696e·202d·6620·2d79·0a20·2077·6865··r·in·-f·-y.··whe | ||
| 0003bdb0:· | 0003bdb0:·6e3a·0a20·202d·206e·6f74·2028·2022·6b65··n:.··-·not·(·"ke | ||
| 0003bdc0:·7 | 0003bdc0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | ||
| 0003bdd0:·5 | 0003bdd0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | ||
| 0003bde0:·6 | 0003bde0:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | ||
| 0003bdf0:·20 | 0003bdf0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 0003be00:·7 | 0003be00:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | ||
| 0003be10:· | 0003be10:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | ||
| 0003be20:· | 0003be20:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0003be30:· | 0003be30:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | ||
| 0003be40:·67 | 0003be40:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | ||
| 0003be50:· | 0003be50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| Max diff block lines reached; 16133756/16189674 bytes (99.65%) of diff not shown. | |||
| Offset 135, 36 lines modified | Offset 135, 14 lines modified | ||
| 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 136 | ····························A.14.2.3,·A.14.2.4 | 136 | ····························A.14.2.3,·A.14.2.4 |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 145 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 147 | get·files·names | ||
| 148 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 149 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 150 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 151 | new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 163 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 164 | ··package_facts: | 148 | ··package_facts: |
| Offset 337, 14 lines modified | Offset 315, 36 lines modified | ||
| 337 | ··-·PCI-DSSv4-11.5.2 | 315 | ··-·PCI-DSSv4-11.5.2 |
| 338 | ··-·high_complexity | 316 | ··-·high_complexity |
| 339 | ··-·high_severity | 317 | ··-·high_severity |
| 340 | ··-·medium_disruption | 318 | ··-·medium_disruption |
| 341 | ··-·no_reboot_needed | 319 | ··-·no_reboot_needed |
| 342 | ··-·restrict_strategy | 320 | ··-·restrict_strategy |
| 343 | ··-·rpm_verify_hashes | 321 | ··-·rpm_verify_hashes |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 324 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 325 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 326 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 327 | get·files·names | ||
| 328 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 329 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 330 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 331 | new·line | ||
| 332 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 333 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 334 | fi | ||
| 335 | else | ||
| 336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 337 | fi | ||
| 344 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 345 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, | 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, |
| 346 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and | 340 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and |
| 347 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 341 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 348 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 342 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 349 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, | 343 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, |
| 350 | run·the·following·command·to·determine·which·package·owns·it: | 344 | run·the·following·command·to·determine·which·package·owns·it: |
| Offset 384, 53 lines modified | Offset 384, 14 lines modified | ||
| 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 388 | ····························SRG-OS-000278-GPOS-00108 | 388 | ····························SRG-OS-000278-GPOS-00108 |
| 389 | ·············_\x8c_\x8i_\x8s············6.1.1 | 389 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 396 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 397 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 398 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 400 | declare·-A·SETPERMS_RPM_DICT | ||
| 401 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 402 | #·is·expected·by·the·RPM·database | ||
| 403 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 404 | $NF·}') | ||
| 405 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 406 | do | ||
| 407 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 408 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 409 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 410 | ········do | ||
| 411 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 412 | duplicates. | ||
| 413 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 414 | ········done | ||
| 415 | done | ||
| 416 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 417 | #·correct·values | ||
| 418 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 419 | do | ||
| 420 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 421 | done | ||
| 422 | else | ||
| 423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 424 | fi | ||
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 430 | -·name:·Gather·the·package·facts | 396 | -·name:·Gather·the·package·facts |
| 431 | ··package_facts: | 397 | ··package_facts: |
| Max diff block lines reached; 1194088/1199893 bytes (99.52%) of diff not shown. | |||
| Offset 15196, 415 lines modified | Offset 15196, 415 lines modified | ||
| 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | ||
| 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b620:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b620:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b630:·6c6 | 0003b630:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b640:·3e3c | 0003b640:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b650:·2270 | 0003b650:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b660:·6 | 0003b660:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b670:·6 | 0003b670:·2269·646d·3630·3230·223e·3c74·6162·6c65··"idm6020"><table | ||
| 0003b680:· | 0003b680:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b690:·6 | 0003b690:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b6a0:·6 | 0003b6a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b6b0:· | 0003b6b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b6c0:· | 0003b6c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b6d0:· | 0003b6d0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b6e0:· | 0003b6e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b6f0:· | 0003b6f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b700:· | 0003b700:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b710:· | 0003b710:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b720:· | 0003b720:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b730:· | 0003b730:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b740:· | 0003b740:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b750:· | 0003b750:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b760:· | 0003b760:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b770:·6 | 0003b770:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b780:· | 0003b780:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b790:· | 0003b790:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003b7a0:·6 | 0003b7a0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003b7b0:· | 0003b7b0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003b7c0:·6 | 0003b7c0:·6773·3a0a·2020·2d20·4343·452d·3835·3738··gs:.··-·CCE-8578 | ||
| 0003b7d0:· | 0003b7d0:·382d·380a·2020·2d20·434a·4953·2d35·2e31··8-8.··-·CJIS-5.1 | ||
| 0003b7e0:· | 0003b7e0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b7f0:· | 0003b7f0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b800:·2 | 0003b800:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b810:· | 0003b810:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b820:· | 0003b820:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b830:·4 | 0003b830:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b840:·2 | 0003b840:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b850:· | 0003b850:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b860:· | 0003b860:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b870:· | 0003b870:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b880:· | 0003b880:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b890:· | 0003b890:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b8a0:· | 0003b8a0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b8b0:· | 0003b8b0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b8c0:· | 0003b8c0:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b8d0:· | 0003b8d0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b8e0:· | 0003b8e0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b8f0:· | 0003b8f0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b900:· | 0003b900:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b910:· | 0003b910:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003b920:· | 0003b920:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003b930:· | 0003b930:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003b940:· | 0003b940:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003b950:· | 0003b950:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| 0003b960:· | 0003b960:·6167·6520·6d61·6e61·6765·7220·7265·696e··age·manager·rein | ||
| 0003b970:· | 0003b970:·7374·616c·6c20·636f·6d6d·616e·6427·0a20··stall·command'.· | ||
| 0003b980:· | 0003b980:·2073·6574·5f66·6163·743a·0a20·2020·2070···set_fact:.····p | ||
| 0003b990:·6 | 0003b990:·6163·6b61·6765·5f6d·616e·6167·6572·5f72··ackage_manager_r | ||
| 0003b9a0:·6 | 0003b9a0:·6569·6e73·7461·6c6c·5f63·6d64·3a20·7a79··einstall_cmd:·zy | ||
| 0003b9b0:· | 0003b9b0:·7070·6572·2072·6569·6e73·7461·6c6c·202d··pper·reinstall·- | ||
| 0003b9c0:· | 0003b9c0:·790a·2020·7768·656e·3a0a·2020·2d20·6e6f··y.··when:.··-·no | ||
| 0003b9d0:·22 | 0003b9d0:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | ||
| 0003b9e0:· | 0003b9e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0003b9f0:·6 | 0003b9f0:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | ||
| 0003ba00:· | 0003ba00:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | ||
| 0003ba10:· | 0003ba10:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003ba20:· | 0003ba20:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | ||
| 0003ba30:·6 | 0003ba30:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0003ba40:· | 0003ba40:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | ||
| 0003ba50:· | 0003ba50:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | ||
| 0003ba60:· | 0003ba60:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | ||
| 0003ba70:·6 | 0003ba70:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 0003ba80:·7 | 0003ba80:·730a·2020·2020·290a·2020·2d20·616e·7369··s.····).··-·ansi | ||
| 0003ba90:· | 0003ba90:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | ||
| 0003baa0:· | 0003baa0:·2069·6e20·5b20·2246·6564·6f72·6122·2c20···in·[·"Fedora",· | ||
| 0003bab0:·22 | 0003bab0:·2252·6564·4861·7422·2c20·2243·656e·744f··"RedHat",·"CentO | ||
| 0003bac0:· | 0003bac0:·5322·2c20·224f·7261·636c·654c·696e·7578··S",·"OracleLinux | ||
| 0003bad0:· | 0003bad0:·2220·5d0a·2020·7461·6773·3a0a·2020·2d20··"·].··tags:.··-· | ||
| 0003bae0:· | 0003bae0:·4343·452d·3835·3738·382d·380a·2020·2d20··CCE-85788-8.··-· | ||
| 0003baf0:· | 0003baf0:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bb00:· | 0003bb00:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bb10:· | 0003bb10:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bb20:· | 0003bb20:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bb30:· | 0003bb30:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bb40:· | 0003bb40:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bb50:· | 0003bb50:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bb60:· | 0003bb60:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bb70:· | 0003bb70:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bb80:· | 0003bb80:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bb90:· | 0003bb90:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bba0:· | 0003bba0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bbb0:· | 0003bbb0:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bbc0:· | 0003bbc0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bbd0:· | 0003bbd0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bbe0:· | 0003bbe0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bbf0:· | 0003bbf0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bc00:· | 0003bc00:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bc10:· | 0003bc10:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bc20:· | 0003bc20:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bc30:·4 | 0003bc30:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bc40:· | 0003bc40:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bc50:· | 0003bc50:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bc60:· | 0003bc60:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bc70:· | 0003bc70:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003bc80:· | 0003bc80:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003bc90:· | 0003bc90:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | ||
| 0003bca0:· | 0003bca0:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003bcb0:· | 0003bcb0:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003bcc0:· | 0003bcc0:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | ||
| 0003bcd0:· | 0003bcd0:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | ||
| 0003bce0:·2 | 0003bce0:·2077·6865·6e3a·0a20·202d·206e·6f74·2028···when:.··-·not·( | ||
| 0003bcf0:· | 0003bcf0:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | ||
| 0003bd00:· | 0003bd00:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 0003bd10:· | 0003bd10:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | ||
| 0003bd20:· | 0003bd20:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | ||
| 0003bd30:·6 | 0003bd30:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | ||
| 0003bd40:· | 0003bd40:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | ||
| 0003bd50:·6e | 0003bd50:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0003bd60:· | 0003bd60:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | ||
| 0003bd70:· | 0003bd70:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | ||
| 0003bd80:·6572· | 0003bd80:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | ||
| Max diff block lines reached; 14833157/14889075 bytes (99.62%) of diff not shown. | |||
| Offset 130, 36 lines modified | Offset 130, 14 lines modified | ||
| 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 131 | ····························A.14.2.3,·A.14.2.4 | 131 | ····························A.14.2.3,·A.14.2.4 |
| 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 140 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 142 | get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 146 | new·line | ||
| 147 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 148 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 158 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 159 | ··package_facts: | 143 | ··package_facts: |
| Offset 332, 14 lines modified | Offset 310, 36 lines modified | ||
| 332 | ··-·PCI-DSSv4-11.5.2 | 310 | ··-·PCI-DSSv4-11.5.2 |
| 333 | ··-·high_complexity | 311 | ··-·high_complexity |
| 334 | ··-·high_severity | 312 | ··-·high_severity |
| 335 | ··-·medium_disruption | 313 | ··-·medium_disruption |
| 336 | ··-·no_reboot_needed | 314 | ··-·no_reboot_needed |
| 337 | ··-·restrict_strategy | 315 | ··-·restrict_strategy |
| 338 | ··-·rpm_verify_hashes | 316 | ··-·rpm_verify_hashes |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 319 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 320 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 321 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 322 | get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 326 | new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 341 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 342 | which·can·be·found·with: | 336 | which·can·be·found·with: |
| 343 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 344 | run·the·following·command·to·determine·which·package·owns·it: | 338 | run·the·following·command·to·determine·which·package·owns·it: |
| 345 | $·rpm·-qf·FILENAME | 339 | $·rpm·-qf·FILENAME |
| Offset 421, 53 lines modified | Offset 421, 14 lines modified | ||
| 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 425 | ····························SRG-OS-000278-GPOS-00108 | 425 | ····························SRG-OS-000278-GPOS-00108 |
| 426 | ·············_\x8c_\x8i_\x8s············6.1.1 | 426 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 433 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 434 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 435 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 436 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 437 | declare·-A·SETPERMS_RPM_DICT | ||
| 438 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 439 | #·is·expected·by·the·RPM·database | ||
| 440 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 441 | $NF·}') | ||
| 442 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 443 | do | ||
| 444 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 445 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 446 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 447 | ········do | ||
| 448 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 449 | duplicates. | ||
| 450 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 451 | ········done | ||
| 452 | done | ||
| 453 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 454 | #·correct·values | ||
| 455 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 456 | do | ||
| 457 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 458 | done | ||
| 459 | else | ||
| 460 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 461 | fi | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 467 | -·name:·Gather·the·package·facts | 433 | -·name:·Gather·the·package·facts |
| 468 | ··package_facts: | 434 | ··package_facts: |
| Max diff block lines reached; 1424103/1429756 bytes (99.60%) of diff not shown. | |||
| Offset 15096, 184 lines modified | Offset 15096, 184 lines modified | ||
| 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | ||
| 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003afe0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aff0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b000:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b010:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b020:·6522·2069·643d·2269·646d·3633·3631·223e··e"·id="idm6361"> | |||
| 0003b030:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b040:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b050:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b060:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b070:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b080:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b090:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003afe0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003aff0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b000:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b010:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b020:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b030:·2269·646d·3633·3631·223e·3c70·7265·3e3c··"idm6361"><pre>< | |||
| 0003b040:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b050:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b060:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b070:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b080:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b090:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b0a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b0b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b0c0:·2223·6964·6d36·3336·3222·2074·6162·696e··"#idm6362"·tabin | |||
| 0003b0d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b0e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b0f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b100:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b110:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b120:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b130:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b140:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b150:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b160:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b170:·6964·6d36·3336·3222·3e3c·7461·626c·6520··idm6362"><table· | |||
| 0003b180:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b190:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1a0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1b0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1c0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b0b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b0c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b1f0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b200:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b210:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b220:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b230:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b240:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b250:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b260:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b270:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b280:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b290:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b2a0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b2b0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b2c0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b2d0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b2e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b300:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b310:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b320:·7267·6574·3d22·2369·646d·3633·3633·2220··rget="#idm6363"· | |||
| 0003b330:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b340:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b350:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b360:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b370:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b380:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b390:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b3a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b3b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b3c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b3d0:·643d·2269·646d·3633·3633·223e·3c74·6162··d="idm6363"><tab | |||
| 0003b3e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b3f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b400:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b410:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b420:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b430:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b440:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b450:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b460:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b470:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b480:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b4a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b4b0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b4c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b4d0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | |||
| 0003b4e0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b4f0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b500:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | |||
| 0003b510:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | |||
| 0003b520:·656c·2d64·6566·6175·6c74·3b20·7468·656e··el-default;·then | |||
| 0003b530:·0a0a·7a79·7070·6572·2069·6e73·7461·6c6c··..zypper·install | |||
| 0003b540:·202d·7920·2261·6964·6522·0a0a·656c·7365···-y·"aide"..else | |||
| 0003b550:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b560:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b570:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b580:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b590:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b5a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b5b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b5d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5f0:·3633·3634·2220·7461·6269·6e64·6578·3d22··6364"·tabindex=" | |||
| 0003b600:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b610:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b620:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b630:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b640:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b650:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b660:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b670:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b680:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| Max diff block lines reached; 22765895/22789935 bytes (99.89%) of diff not shown. | |||
| Offset 15010, 361 lines modified | Offset 15010, 361 lines modified | ||
| 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | ||
| 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aa80:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003aa90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aaa0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003aab0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aac0:·6964·3d22·6964·6d36·3437·3422·3e3c·7461··id="idm6474"><ta | |||
| 0003aad0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aae0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aaf0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ab00:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a | 0003aa80:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003aa90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aaa0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aab0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aac0:·6522·2069·643d·2269·646d·3634·3734·223e··e"·id="idm6474"> | |||
| 0003aad0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003aae0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aaf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ab00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ab10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ab20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ab30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ab40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ab | 0003ab50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003ab | 0003ab60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003ab40:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ab50:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ab60:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ab70:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ab80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ab90:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aba0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003abb0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003abc0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0003abd0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003abe0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003abf0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003a | 0003ab70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003ab80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ab90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aba0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003abb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003abc0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003abd0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003abe0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003abf0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003ac00:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003ac10:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003ac20:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003ac30:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003ac40:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003ac50:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003ac60:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003ac70:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003ac80:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003ac90:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003aca0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003acb0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003acc0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003acd0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ace0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003acf0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·436f··tegy..-·name:·Co | |||
| 0003ad00:·6e66·6967·7572·6520·4149·4445·2074·6f20··nfigure·AIDE·to· | |||
| 0003ad10:·5665·7269·6679·2074·6865·2041·7564·6974··Verify·the·Audit | |||
| 0003ad20:·2054·6f6f·6c73·202d·2047·6174·6865·7220···Tools·-·Gather· | |||
| 0003ad30:·4c69·7374·206f·6620·5061·636b·6167·6573··List·of·Packages | |||
| 0003ad40:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003ad50:·2d38·3536·3130·2d34·0a20·202d·2044·4953··-85610-4.··-·DIS | |||
| 0003ad60:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003ad70:·3330·3633·300a·2020·2d20·4e49·5354·2d38··30630.··-·NIST-8 | |||
| 0003ad80:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003ad90:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | |||
| 0003ada0:·2d39·2833·292e·310a·2020·2d20·6169·6465··-9(3).1.··-·aide | |||
| 0003adb0:·5f63·6865·636b·5f61·7564·6974·5f74·6f6f··_check_audit_too | |||
| 0003adc0:·6c73·0a20·202d·2061·6964·655f·6368·6563··ls.··-·aide_chec | |||
| 0003add0:·6b5f·6175·6469·745f·746f·6f6c·730a·2020··k_audit_tools.·· | |||
| 0003ade0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003adf0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ae00:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ae10:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ae20:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ae30:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ae40:·6779·0a20·2061·6e73·6962·6c65·2e62·7569··gy.··ansible.bui | |||
| 0003ae50:·6c74·696e·2e70·6163·6b61·6765·5f66·6163··ltin.package_fac | |||
| 0003ae60:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ae70:·2061·7574·6f0a·2020·7768·656e·3a20·2722···auto.··when:·'" | |||
| 0003ae80:·6b65·726e·656c·2d64·6566·6175·6c74·2220··kernel-default"· | |||
| 0003ae90:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003aea0:·2e70·6163·6b61·6765·7327·0a0a·2d20·6e61··.packages'..-·na | |||
| 0003aeb0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003aec0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003aed0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003aee0:·3a20·277b·7b20·6974·656d·207d·7d27·0a20··:·'{{·item·}}'.· | |||
| 0003aef0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003af00:·740a·2020·7769·7468·5f69·7465·6d73·3a0a··t.··with_items:. | |||
| 0003af10:·2020·2d20·6169·6465·0a20·2077·6865·6e3a····-·aide.··when: | |||
| 0003a | 0003af20:·2027·226b·6572·6e65·6c2d·6465·6661·756c···'"kernel-defaul | ||
| 0003af30:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003af40:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003af50:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003af60:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003af70:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003af80:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003af90:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003afa0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003afb0:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003afc0:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003afd0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003afe0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003aff0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b000:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b010:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b020:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003b030:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | |||
| 0003b040:·7420·6175·6469·745f·746f·6f6c·7320·6661··t·audit_tools·fa | |||
| 0003b050:·6374·0a20·2073·6574·5f66·6163·743a·0a20··ct.··set_fact:.· | |||
| 0003b060:·2020·2061·7564·6974·5f74·6f6f·6c73·3a0a·····audit_tools:. | |||
| 0003b070:·2020·2020·2d20·2f75·7372·2f73·6269·6e2f······-·/usr/sbin/ | |||
| 0003b080:·6175·6469·7370·640a·2020·2020·2d20·2f75··audispd.····-·/u | |||
| 0003ac20:·6865·6e0a·0a7a·7970·7065·7220·696e·7374··hen..zypper·inst | |||
| 0003ac30:·616c·6c20·2d79·2022·6169·6465·220a·0a0a··all·-y·"aide"... | |||
| Max diff block lines reached; 20975476/21023942 bytes (99.77%) of diff not shown. | |||
| Offset 101, 82 lines modified | Offset 101, 14 lines modified | ||
| 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 102 | Identifiers:·CCE-85610-4 | 102 | Identifiers:·CCE-85610-4 |
| 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 | 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 114 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 115 | zypper·install·-y·"aide" | ||
| 116 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 117 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 118 | aide.conf | ||
| 119 | else | ||
| 120 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 121 | fi | ||
| 122 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 123 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 124 | else | ||
| 125 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 126 | fi | ||
| 127 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 128 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 129 | aide.conf | ||
| 130 | else | ||
| 131 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 132 | fi | ||
| 133 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 134 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 135 | aide.conf | ||
| 136 | else | ||
| 137 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 138 | fi | ||
| 139 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 140 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 141 | else | ||
| 142 | echo·"/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 143 | fi | ||
| 144 | if·grep·-i·'^.*/usr/sbin/augenrules.*$'·/etc/aide.conf;·then | ||
| 145 | sed·-i·"s#.*/usr/sbin/augenrules.*#/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 146 | aide.conf | ||
| 147 | else | ||
| 148 | echo·"/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 149 | fi | ||
| 150 | if·grep·-i·'^.*/usr/sbin/audispd.*$'·/etc/aide.conf;·then | ||
| 151 | sed·-i·"s#.*/usr/sbin/audispd.*#/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 152 | else | ||
| 153 | echo·"/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 163 | -·name:·Gather·the·package·facts | 113 | -·name:·Gather·the·package·facts |
| 164 | ··package_facts: | 114 | ··package_facts: |
| Offset 284, 14 lines modified | Offset 216, 82 lines modified | ||
| 284 | ··-·NIST-800-53-AU-9(3).1 | 216 | ··-·NIST-800-53-AU-9(3).1 |
| 285 | ··-·aide_check_audit_tools | 217 | ··-·aide_check_audit_tools |
| 286 | ··-·low_complexity | 218 | ··-·low_complexity |
| 287 | ··-·low_disruption | 219 | ··-·low_disruption |
| 288 | ··-·medium_severity | 220 | ··-·medium_severity |
| 289 | ··-·no_reboot_needed | 221 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 222 | ··-·restrict_strategy |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 232 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 233 | aide.conf | ||
| 234 | else | ||
| 235 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 236 | fi | ||
| 237 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 238 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 239 | else | ||
| 240 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 241 | fi | ||
| 242 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 243 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 244 | aide.conf | ||
| 245 | else | ||
| 246 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| Max diff block lines reached; 1487322/1493028 bytes (99.62%) of diff not shown. | |||
| Offset 16817, 96 lines modified | Offset 16817, 96 lines modified | ||
| 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041b70:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00041b80:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00041b90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041ba0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041bb0:·6522·2069·643d·2269·646d·3933·3839·223e··e"·id="idm9389"> | |||
| 00041bc0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041b | 00041b70:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 00041b80:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00041b90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041ba0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041bb0:·6170·7365·2220·6964·3d22·6964·6d39·3338··apse"·id="idm938 | |||
| 00041bc0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 00041bd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041be0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041b | 00041bf0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 00041bf0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00041c00:·223e | 00041c00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 00041c10:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041c20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041c30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041c40:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | |||
| 00041c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041c | 00041c60:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00041c70:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 00041c80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00041c90:·2f74·683e·3c74·643e·7061·7463·683c·2f74··/th><td>patch</t | |||
| 00041ca0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041cb0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041cc0:·3a20·5365·6375·7269·7479·2070·6174·6368··:·Security·patch | |||
| 00041cd0:·6573·2061·7265·2075·7020·746f·2064·6174··es·are·up·to·dat | |||
| 00041ce0:·650a·2020·7061·636b·6167·653a·0a20·2020··e.··package:.··· | |||
| 00041cf0:·206e·616d·653a·2027·2a27·0a20·2020·2073···name:·'*'.····s | |||
| 00041d00:·7461·7465·3a20·6c61·7465·7374·0a20·2074··tate:·latest.··t | |||
| 00041d10:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 00041d20:·3631·2d38·0a20·202d·2043·4a49·532d·352e··61-8.··-·CJIS-5. | |||
| 00041d30:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | |||
| 00041d40:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 00041d50:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00041d60:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041d70:·4e49·5354·2d38·3030·2d35·332d·5349·2d32··NIST-800-53-SI-2 | |||
| 00041d80:·2835·290a·2020·2d20·4e49·5354·2d38·3030··(5).··-·NIST-800 | |||
| 00041d90:·2d35·332d·5349·2d32·2863·290a·2020·2d20··-53-SI-2(c).··-· | |||
| 00041da0:·5043·492d·4453·532d·5265·712d·362e·320a··PCI-DSS-Req-6.2. | |||
| 00041db0:·2020·2d20·5043·492d·4453·5376·342d·362e····-·PCI-DSSv4-6. | |||
| 00041dc0:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | |||
| 00041dd0:·362e·332e·330a·2020·2d20·6869·6768·5f64··6.3.3.··-·high_d | |||
| 00041de0:·6973·7275·7074·696f·6e0a·2020·2d20·6c6f··isruption.··-·lo | |||
| 00041df0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00041e00:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00041e10:·0a20·202d·2070·6174·6368·5f73·7472·6174··.··-·patch_strat | |||
| 00041e20:·6567·790a·2020·2d20·7265·626f·6f74·5f72··egy.··-·reboot_r | |||
| 00041e30:·6571·7569·7265·640a·2020·2d20·7365·6375··equired.··-·secu | |||
| 00041e40:·7269·7479·5f70·6174·6368·6573·5f75·705f··rity_patches_up_ | |||
| 00041e50:·746f·5f64·6174·650a·2020·2d20·736b·6970··to_date.··-·skip | |||
| 00041e60:·5f61·6e73·6962·6c65·5f6c·696e·740a·3c2f··_ansible_lint.</ | |||
| 00041e70:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041e80:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041e90:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041ea0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041eb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041ec0:·2369·646d·3933·3930·2220·7461·6269·6e64··#idm9390"·tabind | |||
| 00041ed0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041ee0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041ef0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041f00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041f10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041f20:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00041f30:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00041f40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041f50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041f60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041f70:·3933·3930·223e·3c74·6162·6c65·2063·6c61··9390"><table·cla | |||
| 00041f80:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041f90:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041fa0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041fb0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041fc0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041fd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041fe0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00041ff0:·696f·6e3a·3c2f·7468·3e3c·7464·3e68·6967··ion:</th><td>hig | |||
| 0004 | 00042000:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 00042010:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042020:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 00042030:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00042040:·793a·3c2f·7468·3e3c·7464·3e70·6174·6368··y:</th><td>patch | |||
| 00042050:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00042060:·653e·3c70·7265·3e3c·636f·6465·3e0a·0a7a··e><pre><code>..z | |||
| 00042070:·7970·7065·7220·7061·7463·6820·2d67·2073··ypper·patch·-g·s | |||
| 00042080:·6563·7572·6974·7920·2d79·0a3c·2f63·6f64··ecurity·-y.</cod | |||
| 00041c30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00041c40:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | |||
| 00041c50:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00041c60:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 00041c70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041c80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041c90:·3e3c·7464·3e70·6174·6368·3c2f·7464·3e3c··><td>patch</td>< | |||
| 00041ca0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00041cb0:·3e3c·636f·6465·3e0a·0a7a·7970·7065·7220··><code>..zypper· | |||
| 00041cc0:·7061·7463·6820·2d67·2073·6563·7572·6974··patch·-g·securit | |||
| 00041cd0:·7920·2d79·0a3c·2f63·6f64·653e·3c2f·7072··y·-y.</code></pr | |||
| 00041ce0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041cf0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041d00:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00041d10:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00041d20:·6172·6765·743d·2223·6964·6d39·3339·3022··arget="#idm9390" | |||
| 00041d30:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00041d40:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00041d50:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00041d60:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00041d70:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041d80:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041d90:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041da0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041db0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041dc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041dd0:·6522·2069·643d·2269·646d·3933·3930·223e··e"·id="idm9390"> | |||
| 00041de0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041df0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041e00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041e10:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| Max diff block lines reached; 9365462/9377356 bytes (99.87%) of diff not shown. | |||
| Offset 276, 22 lines modified | Offset 276, 14 lines modified | ||
| 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 | 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 |
| 279 | ·············_\x8c_\x8i_\x8s············1.9 | 279 | ·············_\x8c_\x8i_\x8s············1.9 |
| 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 | 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 |
| 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule | 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 288 | zypper·patch·-g·security·-y | ||
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch |
| 294 | -·name:·Security·patches·are·up·to·date | 288 | -·name:·Security·patches·are·up·to·date |
| 295 | ··package: | 289 | ··package: |
| Offset 310, 14 lines modified | Offset 302, 22 lines modified | ||
| 310 | ··-·high_disruption | 302 | ··-·high_disruption |
| 311 | ··-·low_complexity | 303 | ··-·low_complexity |
| 312 | ··-·medium_severity | 304 | ··-·medium_severity |
| 313 | ··-·patch_strategy | 305 | ··-·patch_strategy |
| 314 | ··-·reboot_required | 306 | ··-·reboot_required |
| 315 | ··-·security_patches_up_to_date | 307 | ··-·security_patches_up_to_date |
| 316 | ··-·skip_ansible_lint | 308 | ··-·skip_ansible_lint |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 314 | zypper·patch·-g·security·-y | ||
| 317 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules | 315 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules |
| 318 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, | 316 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, |
| 319 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it | 317 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it |
| 320 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged | 318 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged |
| 321 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for | 319 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for |
| 322 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. | 320 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. |
| 323 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules | 321 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules |
| Offset 526, 344 lines modified | Offset 526, 14 lines modified | ||
| 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) | 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) |
| 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 | 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 |
| 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 | 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 |
| 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 | 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 |
| 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule | 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule |
| 533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 534 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 535 | if·rpm·--quiet·-q·pam;·then | ||
| 536 | if·[·-f·/usr/bin/authselect·];·then | ||
| 537 | ····if·authselect·list-features·sssd·|·grep·-q·with-silent-lastlog;·then | ||
| 538 | ········if·!·authselect·check;·then | ||
| 539 | ········echo·" | ||
| 540 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 541 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 542 | selected·profile·is·not·intact. | ||
| 543 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 544 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 545 | authselect·profile·is·recommended." | ||
| 546 | ········exit·1 | ||
| 547 | ········fi | ||
| 548 | ········authselect·disable-feature·with-silent-lastlog | ||
| 549 | ········authselect·apply-changes·-b | ||
| 550 | ····else | ||
| 551 | ········if·!·authselect·check;·then | ||
| 552 | ········echo·" | ||
| 553 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 554 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 555 | selected·profile·is·not·intact. | ||
| 556 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 557 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 558 | authselect·profile·is·recommended." | ||
| 559 | ········exit·1 | ||
| 560 | ········fi | ||
| 561 | ········CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| 562 | ········#·If·not·already·in·use,·a·custom·profile·is·created·preserving·the·enabled·features. | ||
| 563 | ········if·[[·!·$CURRENT_PROFILE·==·custom/*·]];·then | ||
| 564 | ············ENABLED_FEATURES=$(authselect·current·|·tail·-n+3·|·awk·'{·print·$2·}') | ||
| 565 | ············#·The·"local"·profile·does·not·contain·essential·security·features·required·by·multiple | ||
| 566 | Benchmarks. | ||
| 567 | ············#·If·currently·used,·it·is·replaced·by·"sssd",·which·is·the·best·option·in·this·case. | ||
| 568 | ············if·[[·$CURRENT_PROFILE·==·local·]];·then | ||
| 569 | ················CURRENT_PROFILE="sssd" | ||
| 570 | ············fi | ||
| 571 | ············authselect·create-profile·hardening·-b·$CURRENT_PROFILE | ||
| 572 | ············CURRENT_PROFILE="custom/hardening" | ||
| 573 | ············authselect·apply-changes·-b·--backup=before-hardening-custom-profile | ||
| 574 | ············authselect·select·$CURRENT_PROFILE | ||
| 575 | ············for·feature·in·$ENABLED_FEATURES;·do | ||
| 576 | ················authselect·enable-feature·$feature; | ||
| 577 | ············done | ||
| 578 | ············authselect·apply-changes·-b·--backup=after-hardening-custom-profile | ||
| 579 | ········fi | ||
| 580 | ········PAM_FILE_NAME=$(basename·"/etc/pam.d/login") | ||
| 581 | ········PAM_FILE_PATH="/etc/authselect/$CURRENT_PROFILE/$PAM_FILE_NAME" | ||
| 582 | ········authselect·apply-changes·-b | ||
| 583 | ········if·[·-e·"$PAM_FILE_PATH"·]·;·then | ||
| 584 | ············PAM_FILE_PATH="$PAM_FILE_PATH" | ||
| 585 | ············if·[·-f·/usr/bin/authselect·];·then | ||
| 586 | ················if·!·authselect·check;·then | ||
| 587 | ················echo·" | ||
| 588 | ················authselect·integrity·check·failed.·Remediation·aborted! | ||
| 589 | ················This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected | ||
| 590 | or·the·selected·profile·is·not·intact. | ||
| 591 | ················It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is | ||
| 592 | available. | ||
| 593 | ················In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a | ||
| 594 | custom·authselect·profile·is·recommended." | ||
| 595 | ················exit·1 | ||
| 596 | ················fi | ||
| 597 | ················CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| Max diff block lines reached; 928594/946570 bytes (98.10%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0d0:·2269·646d·3633·3631·223e·3c74·6162·6c65··"idm6361"><table | |||
| 0003b0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b0e0:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b170:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b220:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b270:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b290:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b2c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b310:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b320:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b330:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b340:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b350:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b360:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b370:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b380:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b390:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b3a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b3b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b3c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b3d0:·2369·646d·3633·3633·2220·7461·6269·6e64··#idm6363"·tabind | |||
| 0003b3e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b3f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b400:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b410:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b420:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b430:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b440:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b450:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b460:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b470:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b480:·3633·3633·223e·3c74·6162·6c65·2063·6c61··6363"><table·cla | |||
| 0003b490:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b4a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b4b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b4c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b4d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b4e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b4f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b500:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b510:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b520:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b530:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b550:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b560:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b570:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b580:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b590:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b5a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b5b0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 0003b5c0:·6574·202d·7120·6b65·726e·656c·2d64·6566··et·-q·kernel-def | |||
| 0003b5d0:·6175·6c74·3b20·7468·656e·0a0a·7a79·7070··ault;·then..zypp | |||
| 0003b5e0:·6572·2069·6e73·7461·6c6c·202d·7920·2261··er·install·-y·"a | |||
| 0003b5f0:·6964·6522·0a0a·656c·7365·0a20·2020·2026··ide"..else.····& | |||
| 0003b600:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | |||
| 0003b610:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | |||
| 0003b620:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | |||
| 0003b630:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | |||
| 0003b640:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003b650:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b660:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b670:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b680:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b690:·7267·6574·3d22·2369·646d·3633·3634·2220··rget="#idm6364"· | |||
| 0003b6a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b6b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b6c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b6d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b6e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b6f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b700:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b710:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| Max diff block lines reached; 21108007/21132047 bytes (99.89%) of diff not shown. | |||
| Offset 15193, 184 lines modified | Offset 15193, 184 lines modified | ||
| 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | ||
| 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b5f0:·656d·6564·6961·7469·6f6e·204 | 0003b5f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b600:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b640:·646d·3238·3730·223e·3c74·6162·6c65·2063··dm2870"><table·c | |||
| 0003b650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b600:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b610:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b620:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b630:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b640:·7073·6522·2069·643d·2269·646d·3238·3730··pse"·id="idm2870 | |||
| 0003b650:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b660:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b670:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b680:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b690:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b6b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b6c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b6d0:·2d74·6172·6765·743d·2223·6964·6d32·3837··-target="#idm287 | |||
| 0003b6e0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b6f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b700:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b710:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b720:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b730:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b740:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b750:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b760:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b770:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b780:·7365·2220·6964·3d22·6964·6d32·3837·3122··se"·id="idm2871" | |||
| 0003b790:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b7a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b7b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b6d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b800:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b6e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b6f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b700:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b710:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b840:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b850:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b860:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b870:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b880:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b890:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b8a0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b8b0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b8c0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b8d0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b8e0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b8f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b900:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b910:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b920:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b930:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b940:·646d·3238·3732·2220·7461·6269·6e64·6578··dm2872"·tabindex | |||
| 0003b950:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b960:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b970:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b980:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b990:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b9a0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b9b0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b9c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b9d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9e0:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b9f0:·3732·223e·3c74·6162·6c65·2063·6c61·7373··72"><table·class | |||
| 0003ba00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ba10:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ba20:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ba30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ba40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ba50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ba70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ba80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b | 0003b720:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003bab0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bac0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bad0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b | 0003b730:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b740:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b750:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b760:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b770:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003baf0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | |||
| 0003bb00:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | |||
| 0003bb10:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | |||
| 0003bb20:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 0003bb30:·202d·7120·6b65·726e·656c·2d64·6566·6175···-q·kernel-defau | |||
| 0003bb40:·6c74·3b20·7468·656e·0a0a·7a79·7070·6572··lt;·then..zypper | |||
| 0003bb50:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003bb60:·6522·0a0a·656c·7365·0a20·2020·2026·6774··e"..else.····> | |||
| 0003bb70:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003bb80:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003bb90:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003bba0:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003bbb0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003bbc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bbd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bbe0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bbf0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bc00:·6574·3d22·2369·646d·3238·3733·2220·7461··et="#idm2873"·ta | |||
| 0003bc10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bc20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bc30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bc40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bc50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| Max diff block lines reached; 18050743/18074783 bytes (99.87%) of diff not shown. | |||
| Offset 15186, 183 lines modified | Offset 15186, 183 lines modified | ||
| 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | ||
| 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b580:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b590:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b5b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5c0:·2069·643d·2269·646d·3238·3730·223e·3c74···id="idm2870"><t | |||
| 0003b5d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b5f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b600:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b610:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b620:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b630:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b640:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b580:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b590:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3238·3730·223e·3c70·7265·3e3c·636f··dm2870"><pre><co | |||
| 0003b5e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b5f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b600:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b610:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b620:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b630:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b640:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b650:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b660:·6964·6d32·3837·3122·2074·6162·696e·6465··idm2871"·tabinde | |||
| 0003b670:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b680:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b690:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6c0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b6d0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b6f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b700:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b710:·6d32·3837·3122·3e3c·7461·626c·6520·636c··m2871"><table·cl | |||
| 0003b720:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b730:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b740:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b750:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b760:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b650:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b780:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b660:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b670:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b7b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b7f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b800:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b810:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b820:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b830:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b840:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b850:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b860:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b870:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b880:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b890:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b8a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b8b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b8c0:·6574·3d22·2369·646d·3238·3732·2220·7461··et="#idm2872"·ta | |||
| 0003b8d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b8e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b8f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b900:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b910:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b920:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b930:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b970:·2269·646d·3238·3732·223e·3c74·6162·6c65··"idm2872"><table | |||
| 0003b980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b9d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b9e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b9f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ba00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba10:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba20:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba30:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b | 0003b690:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b6a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003b | 0003b6b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b6c0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b6d0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b6e0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b6f0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b700:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003ba70:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003ba80:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003ba90:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003baa0:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | |||
| 0003bab0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003bac0:·2d64·6566·6175·6c74·3b20·7468·656e·0a0a··-default;·then.. | |||
| 0003bad0:·7a79·7070·6572·2069·6e73·7461·6c6c·202d··zypper·install·- | |||
| 0003bae0:·7920·2261·6964·6522·0a0a·656c·7365·0a20··y·"aide"..else.· | |||
| 0003baf0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003bb00:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003bb10:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003bb20:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003bb30:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003bb40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bb50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bb60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bb70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bb80:·612d·7461·7267·6574·3d22·2369·646d·3238··a-target="#idm28 | |||
| 0003bb90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | |||
| 0003bba0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bbb0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bbc0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| Max diff block lines reached; 7487653/7511555 bytes (99.68%) of diff not shown. | |||
| Offset 130, 44 lines modified | Offset 130, 14 lines modified | ||
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 132 | ·············_\x8c_\x8i_\x8s············1.4.1 | 132 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 159 | zypper·install·-y·"aide" | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | -·name:·Gather·the·package·facts | 142 | -·name:·Gather·the·package·facts |
| 169 | ··package_facts: | 143 | ··package_facts: |
| Offset 200, 14 lines modified | Offset 170, 44 lines modified | ||
| 200 | ··-·PCI-DSSv4-11.5.2 | 170 | ··-·PCI-DSSv4-11.5.2 |
| 201 | ··-·enable_strategy | 171 | ··-·enable_strategy |
| 202 | ··-·low_complexity | 172 | ··-·low_complexity |
| 203 | ··-·low_disruption | 173 | ··-·low_disruption |
| 204 | ··-·medium_severity | 174 | ··-·medium_severity |
| 205 | ··-·no_reboot_needed | 175 | ··-·no_reboot_needed |
| 206 | ··-·package_aide_installed | 176 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 187 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 188 | zypper·install·-y·"aide" | ||
| 189 | else | ||
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 191 | fi | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 204 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/bin/aide·--init | 205 | $·sudo·/usr/bin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 211 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 207 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 212 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 208 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 213 | generated·database·can·be·installed·as·follows: | 209 | generated·database·can·be·installed·as·follows: |
| Offset 235, 26 lines modified | Offset 235, 14 lines modified | ||
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 237 | ·············_\x8c_\x8i_\x8s············1.4.1 | 237 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 244 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 245 | zypper·install·-y·"aide" | ||
| 246 | /usr/bin/aide·--init | ||
| 247 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 254 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 255 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 256 | -·name:·Gather·the·package·facts | 247 | -·name:·Gather·the·package·facts |
| 257 | ··package_facts: | 248 | ··package_facts: |
| Offset 367, 14 lines modified | Offset 355, 26 lines modified | ||
| 367 | ··-·PCI-DSSv4-11.5.2 | 355 | ··-·PCI-DSSv4-11.5.2 |
| 368 | ··-·aide_build_database | 356 | ··-·aide_build_database |
| 369 | ··-·low_complexity | 357 | ··-·low_complexity |
| 370 | ··-·low_disruption | 358 | ··-·low_disruption |
| 371 | ··-·medium_severity | 359 | ··-·medium_severity |
| 372 | ··-·no_reboot_needed | 360 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 361 | ··-·restrict_strategy |
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 919638/924738 bytes (99.45%) of diff not shown. | |||
| Offset 15172, 184 lines modified | Offset 15172, 184 lines modified | ||
| 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | ||
| 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4a0:·6469·6174·696f·6e20·4 | 0003b4a0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b4b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b4c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b4d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b4e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b4f0:·3837·3022·3e3c·7461·626c·6520·636c·6173··870"><table·clas | |||
| 0003b500:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b510:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b520:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b530:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b540:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b550:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b560:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b4c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b4d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b4e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b4f0:·2220·6964·3d22·6964·6d32·3837·3022·3e3c··"·id="idm2870">< | |||
| 0003b500:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b510:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b520:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b530:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b540:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b550:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b560:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b570:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b580:·7267·6574·3d22·2369·646d·3238·3731·2220··rget="#idm2871"· | |||
| 0003b590:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b5a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b5b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b5c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b5d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b5e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b5f0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b600:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b610:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b620:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b630:·2069·643d·2269·646d·3238·3731·223e·3c74···id="idm2871"><t | |||
| 0003b640:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b650:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b660:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b670:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b680:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b570:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b580:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b6b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b6c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b590:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b5a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b5b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b | 0003b5c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b6f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b700:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b710:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b720:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b730:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b740:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b750:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b760:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b770:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b780:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b790:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b7a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b7b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b7c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b7d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b7e0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b7f0:·3837·3222·2074·6162·696e·6465·783d·2230··872"·tabindex="0 | |||
| 0003b800:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b810:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b820:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b830:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b840:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b850:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b860:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b870:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b880:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b890:·7365·2220·6964·3d22·6964·6d32·3837·3222··se"·id="idm2872" | |||
| 0003b8a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b8b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b8c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b8d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b8e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b8f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b900:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b910:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b920:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b930:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b940:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b5d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b5e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b5f0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b600:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b610:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b620:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b960:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b970:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b980:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b990:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b9a0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b9b0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b9c0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b9d0:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b9e0:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b9f0:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003ba00:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003ba10:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003ba20:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003ba30:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003ba40:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003ba50:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003ba60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ba70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ba80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ba90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003baa0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bab0:·2223·6964·6d32·3837·3322·2074·6162·696e··"#idm2873"·tabin | |||
| 0003bac0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bad0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bae0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| Max diff block lines reached; 7225211/7249251 bytes (99.67%) of diff not shown. | |||
| Offset 127, 44 lines modified | Offset 127, 14 lines modified | ||
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | include·install_aide | ||
| 144 | class·install_aide·{ | ||
| 145 | ··package·{·'aide': | ||
| 146 | ····ensure·=>·'installed', | ||
| 147 | ··} | ||
| 148 | } | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 155 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 156 | zypper·install·-y·"aide" | ||
| 157 | else | ||
| 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 159 | fi | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | -·name:·Gather·the·package·facts | 139 | -·name:·Gather·the·package·facts |
| 166 | ··package_facts: | 140 | ··package_facts: |
| Offset 197, 14 lines modified | Offset 167, 44 lines modified | ||
| 197 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 198 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 199 | ··-·low_complexity | 169 | ··-·low_complexity |
| 200 | ··-·low_disruption | 170 | ··-·low_disruption |
| 201 | ··-·medium_severity | 171 | ··-·medium_severity |
| 202 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 203 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 184 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 185 | zypper·install·-y·"aide" | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | include·install_aide | ||
| 195 | class·install_aide·{ | ||
| 196 | ··package·{·'aide': | ||
| 197 | ····ensure·=>·'installed', | ||
| 198 | ··} | ||
| 199 | } | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/bin/aide·--init | 202 | $·sudo·/usr/bin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 208 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 204 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 209 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 205 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 210 | generated·database·can·be·installed·as·follows: | 206 | generated·database·can·be·installed·as·follows: |
| Offset 232, 26 lines modified | Offset 232, 14 lines modified | ||
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 234 | ·············_\x8c_\x8i_\x8s············1.4.1 | 234 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 241 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 242 | zypper·install·-y·"aide" | ||
| 243 | /usr/bin/aide·--init | ||
| 244 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 249 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 250 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 251 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 252 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 253 | -·name:·Gather·the·package·facts | 244 | -·name:·Gather·the·package·facts |
| 254 | ··package_facts: | 245 | ··package_facts: |
| Offset 364, 14 lines modified | Offset 352, 26 lines modified | ||
| 364 | ··-·PCI-DSSv4-11.5.2 | 352 | ··-·PCI-DSSv4-11.5.2 |
| 365 | ··-·aide_build_database | 353 | ··-·aide_build_database |
| 366 | ··-·low_complexity | 354 | ··-·low_complexity |
| 367 | ··-·low_disruption | 355 | ··-·low_disruption |
| 368 | ··-·medium_severity | 356 | ··-·medium_severity |
| 369 | ··-·no_reboot_needed | 357 | ··-·no_reboot_needed |
| 370 | ··-·restrict_strategy | 358 | ··-·restrict_strategy |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 889206/894306 bytes (99.43%) of diff not shown. | |||
| Offset 15185, 184 lines modified | Offset 15185, 184 lines modified | ||
| 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | ||
| 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b570:·6564·6961·7469·6f6e·204 | 0003b570:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b5c0:·3238·3730·223e·3c74·6162·6c65·2063·6c61··2870"><table·cla | |||
| 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b630:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b580:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b590:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5c0:·6522·2069·643d·2269·646d·3238·3730·223e··e"·id="idm2870"> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b5e0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5f0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b600:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b610:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b620:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b630:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b640:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b650:·6172·6765·743d·2223·6964·6d32·3837·3122··arget="#idm2871" | |||
| 0003b660:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b670:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b680:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b690:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b6a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b6b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b6c0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b6d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b6e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b6f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b700:·2220·6964·3d22·6964·6d32·3837·3122·3e3c··"·id="idm2871">< | |||
| 0003b710:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b720:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b730:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b740:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b750:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b640:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b780:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b790:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003b660:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b670:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b680:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b690:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003b7c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b7d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b7e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b7f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b800:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b810:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b820:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b830:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b840:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b850:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b860:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b870:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b880:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b890:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b8a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b8b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b8c0:·3238·3732·2220·7461·6269·6e64·6578·3d22··2872"·tabindex=" | |||
| 0003b8d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b8e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b8f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b900:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b910:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b920:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b930:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b940:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b950:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b960:·7073·6522·2069·643d·2269·646d·3238·3732··pse"·id="idm2872 | |||
| 0003b970:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b980:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b990:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b9a0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b9b0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9c0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b9d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b9e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b9f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ba10:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b6a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003b6b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b6c0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b6d0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b6e0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b6f0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003ba30:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba40:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba50:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba60:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003ba70:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003ba80:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003ba90:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003baa0:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0003bab0:·7120·6b65·726e·656c·2d64·6566·6175·6c74··q·kernel-default | |||
| 0003bac0:·3b20·7468·656e·0a0a·7a79·7070·6572·2069··;·then..zypper·i | |||
| 0003bad0:·6e73·7461·6c6c·202d·7920·2261·6964·6522··nstall·-y·"aide" | |||
| 0003bae0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003baf0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003bb00:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003bb10:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003bb20:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003bb30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bb40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bb50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bb60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bb70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bb80:·3d22·2369·646d·3238·3733·2220·7461·6269··="#idm2873"·tabi | |||
| 0003bb90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bba0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bbb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| Max diff block lines reached; 17967232/17991272 bytes (99.87%) of diff not shown. | |||
| Offset 15110, 184 lines modified | Offset 15110, 184 lines modified | ||
| 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b0d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b0e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b100:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b110:·3d22·6964·6d32·3837·3022·3e3c·7461·626c··="idm2870"><tabl | |||
| 0003b120:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b130:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b140:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b150:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b160:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b170:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b180:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b190:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b0d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b0e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b100:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b110:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b120:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b130:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b140:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b150:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b160:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b170:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b180:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b190:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1b0:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b1c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b1f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b200:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b210:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b220:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b230:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b240:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b250:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b260:·3731·223e·3c74·6162·6c65·2063·6c61·7373··71"><table·class | |||
| 0003b270:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b280:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b290:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b2a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b2b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b1a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b2d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b1b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b1c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b1d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b300:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b310:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b320:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b330:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b340:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b350:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b360:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b370:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b380:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b390:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b3a0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b3b0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b3c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b3d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b3e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b3f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b410:·2223·6964·6d32·3837·3222·2074·6162·696e··"#idm2872"·tabin | |||
| 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b470:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b480:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b490:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4c0:·6d32·3837·3222·3e3c·7461·626c·6520·636c··m2872"><table·cl | |||
| 0003b4d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b4f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b500:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b510:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b520:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b530:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b540:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b550:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b560:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b570:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b580:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b590:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b5a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b5b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b5c0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b5d0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b5e0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b5f0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003b600:·6965·7420·2d71·206b·6572·6e65·6c2d·6465··iet·-q·kernel-de | |||
| 0003b610:·6661·756c·743b·2074·6865·6e0a·0a7a·7970··fault;·then..zyp | |||
| 0003b620:·7065·7220·696e·7374·616c·6c20·2d79·2022··per·install·-y·" | |||
| 0003b630:·6169·6465·220a·0a65·6c73·650a·2020·2020··aide"..else.···· | |||
| 0003b640:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b650:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b660:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b670:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b680:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b690:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b6a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b6b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b6c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b6d0:·6172·6765·743d·2223·6964·6d32·3837·3322··arget="#idm2873" | |||
| 0003b6e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b6f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b700:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b710:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b720:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b730:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b740:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b750:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| Max diff block lines reached; 13705554/13729594 bytes (99.82%) of diff not shown. | |||
| Offset 115, 44 lines modified | Offset 115, 14 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 144 | zypper·install·-y·"aide" | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 154 | ··package_facts: | 128 | ··package_facts: |
| Offset 185, 14 lines modified | Offset 155, 44 lines modified | ||
| 185 | ··-·PCI-DSSv4-11.5.2 | 155 | ··-·PCI-DSSv4-11.5.2 |
| 186 | ··-·enable_strategy | 156 | ··-·enable_strategy |
| 187 | ··-·low_complexity | 157 | ··-·low_complexity |
| 188 | ··-·low_disruption | 158 | ··-·low_disruption |
| 189 | ··-·medium_severity | 159 | ··-·medium_severity |
| 190 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 191 | ··-·package_aide_installed | 161 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 173 | zypper·install·-y·"aide" | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 189 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/bin/aide·--init | 190 | $·sudo·/usr/bin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 192 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 193 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 198 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 220, 26 lines modified | Offset 220, 14 lines modified | ||
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Gather·the·package·facts | 232 | -·name:·Gather·the·package·facts |
| 242 | ··package_facts: | 233 | ··package_facts: |
| Offset 352, 14 lines modified | Offset 340, 26 lines modified | ||
| 352 | ··-·PCI-DSSv4-11.5.2 | 340 | ··-·PCI-DSSv4-11.5.2 |
| 353 | ··-·aide_build_database | 341 | ··-·aide_build_database |
| 354 | ··-·low_complexity | 342 | ··-·low_complexity |
| 355 | ··-·low_disruption | 343 | ··-·low_disruption |
| 356 | ··-·medium_severity | 344 | ··-·medium_severity |
| 357 | ··-·no_reboot_needed | 345 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 346 | ··-·restrict_strategy |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 349 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 1257576/1262670 bytes (99.60%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b1b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b1c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b1d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b1e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b1f0:·3d22·6964·6d32·3837·3022·3e3c·7461·626c··="idm2870"><tabl | |||
| 0003b200:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b210:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b220:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b230:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b240:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b250:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b260:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b270:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1b0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b1c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b1d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b1e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b1f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b200:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b210:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b220:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b230:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b240:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b250:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b260:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b270:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b280:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b290:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b2a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b2b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b2c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b2d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b2e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b2f0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b300:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b310:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b320:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b330:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b340:·3731·223e·3c74·6162·6c65·2063·6c61·7373··71"><table·class | |||
| 0003b350:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b360:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b370:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b380:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b390:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b280:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b3b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b290:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b2a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b2b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b3e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b3f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b400:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b410:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b420:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b430:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b440:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b450:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b460:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b470:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b480:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b490:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b4a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b4b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b4c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b4d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b4e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b4f0:·2223·6964·6d32·3837·3222·2074·6162·696e··"#idm2872"·tabin | |||
| 0003b500:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b510:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b520:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b530:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b540:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b550:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b560:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b570:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b580:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b590:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5a0:·6d32·3837·3222·3e3c·7461·626c·6520·636c··m2872"><table·cl | |||
| 0003b5b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b5c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b5e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b5f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b600:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b610:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b620:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b630:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b640:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b650:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b660:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b670:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b680:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b690:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b6a0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b6b0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b6c0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b6d0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003b6e0:·6965·7420·2d71·206b·6572·6e65·6c2d·6465··iet·-q·kernel-de | |||
| 0003b6f0:·6661·756c·743b·2074·6865·6e0a·0a7a·7970··fault;·then..zyp | |||
| 0003b700:·7065·7220·696e·7374·616c·6c20·2d79·2022··per·install·-y·" | |||
| 0003b710:·6169·6465·220a·0a65·6c73·650a·2020·2020··aide"..else.···· | |||
| 0003b720:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003b730:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003b740:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003b750:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003b760:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003b770:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b780:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b790:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b7a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b7b0:·6172·6765·743d·2223·6964·6d32·3837·3322··arget="#idm2873" | |||
| 0003b7c0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b7d0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b7e0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b7f0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b800:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b810:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b820:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b830:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| Max diff block lines reached; 14652732/14676772 bytes (99.84%) of diff not shown. | |||
| Offset 117, 44 lines modified | Offset 117, 14 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8c_\x8i_\x8s············1.4.1 | 119 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | include·install_aide | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | } | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 146 | zypper·install·-y·"aide" | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 156 | ··package_facts: | 130 | ··package_facts: |
| Offset 187, 14 lines modified | Offset 157, 44 lines modified | ||
| 187 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 188 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 189 | ··-·low_complexity | 159 | ··-·low_complexity |
| 190 | ··-·low_disruption | 160 | ··-·low_disruption |
| 191 | ··-·medium_severity | 161 | ··-·medium_severity |
| 192 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 193 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/bin/aide·--init | 192 | $·sudo·/usr/bin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 222, 26 lines modified | Offset 222, 14 lines modified | ||
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8c_\x8i_\x8s············1.4.1 | 224 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 230 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 231 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 232 | zypper·install·-y·"aide" | ||
| 233 | /usr/bin/aide·--init | ||
| 234 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 235 | else | ||
| 236 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 237 | fi | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Gather·the·package·facts | 234 | -·name:·Gather·the·package·facts |
| 244 | ··package_facts: | 235 | ··package_facts: |
| Offset 354, 14 lines modified | Offset 342, 26 lines modified | ||
| 354 | ··-·PCI-DSSv4-11.5.2 | 342 | ··-·PCI-DSSv4-11.5.2 |
| 355 | ··-·aide_build_database | 343 | ··-·aide_build_database |
| 356 | ··-·low_complexity | 344 | ··-·low_complexity |
| 357 | ··-·low_disruption | 345 | ··-·low_disruption |
| 358 | ··-·medium_severity | 346 | ··-·medium_severity |
| 359 | ··-·no_reboot_needed | 347 | ··-·no_reboot_needed |
| 360 | ··-·restrict_strategy | 348 | ··-·restrict_strategy |
| 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 350 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 351 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 1351314/1356408 bytes (99.62%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d4 | 00000450:·3c74·643e·456e·7375·7265·2053·4d45·5020··<td>Ensure·SMEP· | ||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d4 | 000004a0:·2020·2020·2054·6865·2053·4d45·5020·6973·······The·SMEP·is | ||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000004d0:·6d6f·6465·2066·726f·6d20· | 000004d0:·6d6f·6465·2066·726f·6d20·6578·6563·7574··mode·from·execut | ||
| 000004e0:·696e·6720·7573·6572·2073·7061·6365·2063··ing·user·space·c | |||
| 000004f0:·6f64·652c·0a69·7420·6973·2065·6e61·626c··ode,.it·is·enabl | |||
| 00000500:·6564·2062·7920·6465·6661·756c·7420·7369··ed·by·default·si | |||
| 00000510:·6e63·6520·4c69·6e75·7820·6b65·726e·656c··nce·Linux·kernel | |||
| 00000520:·2033·2e30·2e20·4275·7420·6974·2063·6f75···3.0.·But·it·cou | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005 | 00000530:·6c64·2062·6520·6469·7361·626c·6564·2074··ld·be·disabled·t | ||
| 00000540:·6872·6f75·6768·0a6b·6572·6e65·6c20·626f··hrough.kernel·bo | |||
| 00000550:·6f74·2070·6172·616d·6574·6572·732e·0a0a··ot·parameters... | |||
| 00000560:·456e·7375·7265·2074·6861·7420·5375·7065··Ensure·that·Supe | |||
| 00000570:·7276·6973·6f72·204d·6f64·6520·4578·6563··rvisor·Mode·Exec | |||
| 00000580:·7574·696f·6e20·5072·6576·656e·7469·6f6e··ution·Prevention | |||
| 00000590:·2028·534d·4550·2920·6973·206e·6f74·2064···(SMEP)·is·not·d | |||
| 000005a0:·6973·6162·6c65·6420·6279·0a74·6865·203c··isabled·by.the·< | |||
| 000005b0:·7474·3e6e·6f73·6d65·703c·2f74·743e·2062··tt>nosmep</tt>·b | |||
| 000005c0:·6f6f·7420·7061·7261·6d65·6e74·6572·206f··oot·paramenter·o | |||
| 000005d0:·7074·696f·6e2e·0a0a·4368·6563·6b20·7468··ption...Check·th | |||
| 000005e0:·6174·2074·6865·206c·696e·6520·3c70·7265··at·the·line·<pre | |||
| 000005f0:·3e47·5255·425f·434d·444c·494e·455f·4c49··>GRUB_CMDLINE_LI | |||
| 00000600:·4e55·583d·222e·2e2e·223c·2f70·7265·3e20··NUX="..."</pre>· | |||
| 00000610:·7769·7468·696e·203c·7474·3e2f·6574·632f··within·<tt>/etc/ | |||
| 00000620:·6465·6661·756c·742f·6772·7562·3c2f·7474··default/grub</tt | |||
| 00000630:·3e0a·646f·6573·6e27·7420·636f·6e74·6169··>.doesn't·contai | |||
| 00000640:·6e20·7468·6520·6172·6775·6d65·6e74·203c··n·the·argument·< | |||
| 00000650:·7474·3e6e·6f73·6d65·703c·2f74·743e·2e0a··tt>nosmep</tt>.. | |||
| 00000660:·5275·6e20·7468·6520·666f·6c6c·6f77·696e··Run·the·followin | |||
| 00000670:·6720·636f·6d6d·616e·6420·746f·2075·7064··g·command·to·upd | |||
| 00000680:·6174·6520·636f·6d6d·616e·6420·6c69·6e65··ate·command·line | |||
| 00000690:·2066·6f72·2061·6c72·6561·6479·2069·6e73···for·already·ins | |||
| 000006a0:·7461·6c6c·6564·206b·6572·6e65·6c73·3a0a··talled·kernels:. | |||
| 000006b0:·3c70·7265·3e23·2067·7275·6262·7920·2d2d··<pre>#·grubby·-- | |||
| 000006c0:·7570·6461·7465·2d6b·6572·6e65·6c3d·414c··update-kernel=AL | |||
| 000006d0:·4c20·2d2d·7265·6d6f·7665·2d61·7267·733d··L·--remove-args= | |||
| 000006e0:·226e·6f73·6d65·7022·3c2f·7072·653e·0a20··"nosmep"</pre>.· | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 000007d0:·2020·3c2f·7464·3e0a·2020·2020·3c2f·7472····</td>.····</tr | |||
| 00000 | 000006f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e45·6e73·7572·6520·534d·····<td>Ensure·SM | |||
| 00000810:·4550·2069·7320·6e6f·7420·6469·7361·626c··EP·is·not·disabl | |||
| 00000820:·6564·2064·7572·696e·6720·626f·6f74·3c2f··ed·during·boot</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00000840:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000850:·2020·2020·2020·2020·5468·6520·534d·4550··········The·SMEP | |||
| 00000860:·2069·7320·7573·6564·2074·6f20·7072·6576···is·used·to·prev | |||
| 00000870:·656e·7420·7468·6520·7375·7065·7276·6973··ent·the·supervis | |||
| 00000880:·6f72·206d·6f64·6520·6672·6f6d·2065·7865··or·mode·from·exe | |||
| 00000890:·6375·7469·6e67·2075·7365·7220·7370·6163··cuting·user·spac | |||
| 000008a0:·6520·636f·6465·2c0a·6974·2069·7320·656e··e·code,.it·is·en | |||
| 000008b0:·6162·6c65·6420·6279·2064·6566·6175·6c74··abled·by·default | |||
| 000008c0:·2073·696e·6365·204c·696e·7578·206b·6572···since·Linux·ker | |||
| 000008d0:·6e65·6c20·332e·302e·2042·7574·2069·7420··nel·3.0.·But·it· | |||
| 000008e0:·636f·756c·6420·6265·2064·6973·6162·6c65··could·be·disable | |||
| 000008f0:·6420·7468·726f·7567·680a·6b65·726e·656c··d·through.kernel | |||
| 00000900:·2062·6f6f·7420·7061·7261·6d65·7465·7273···boot·parameters | |||
| 00000910:·2e0a·0a45·6e73·7572·6520·7468·6174·2053··...Ensure·that·S | |||
| 00000920:·7570·6572·7669·736f·7220·4d6f·6465·2045··upervisor·Mode·E | |||
| 00000930:·7865·6375·7469·6f6e·2050·7265·7665·6e74··xecution·Prevent | |||
| 00000940:·696f·6e20·2853·4d45·5029·2069·7320·6e6f··ion·(SMEP)·is·no | |||
| 00000950:·7420·6469·7361·626c·6564·2062·790a·7468··t·disabled·by.th | |||
| 00000960:·6520·3c74·743e·6e6f·736d·6570·3c2f·7474··e·<tt>nosmep</tt | |||
| 00000970:·3e20·626f·6f74·2070·6172·616d·656e·7465··>·boot·paramente | |||
| 00000980:·7220·6f70·7469·6f6e·2e0a·0a43·6865·636b··r·option...Check | |||
| 00000990:·2074·6861·7420·7468·6520·6c69·6e65·203c···that·the·line·< | |||
| 000009a0:·7072·653e·4752·5542·5f43·4d44·4c49·4e45··pre>GRUB_CMDLINE | |||
| 000009b0:·5f4c·494e·5558·3d22·2e2e·2e22·3c2f·7072··_LINUX="..."</pr | |||
| 000009c0:·653e·2077·6974·6869·6e20·3c74·743e·2f65··e>·within·<tt>/e | |||
| Max diff block lines reached; 2986143/3022183 bytes (98.81%) of diff not shown. | |||
| Offset 1, 29 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 20 | ······························mode·from·executing·user·space·code,·it·is | 4 | ······························mode·from·executing·user·space·code,·it·is |
| 21 | ······························enabled·by·default·since·Linux·kernel·3.0. | 5 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 22 | ······························But·it·could·be·disabled·through·kernel·boot | 6 | ······························But·it·could·be·disabled·through·kernel·boot |
| 23 | ······························parameters.·Ensure·that·Supervisor·Mode | 7 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 31, 21 lines modified | Offset 15, 14 lines modified | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 33 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 34 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 35 | ······························kernels: | 19 | ······························kernels: |
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 37 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 46 | ······························package·do·not·need·to·install·the·kernel- | 23 | ······························package·do·not·need·to·install·the·kernel- |
| 47 | ······························PAE·package·because·the·64-bit·x86·kernel | 24 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 48 | ······························already·includes·this·support.·However,·if | 25 | ······························already·includes·this·support.·However,·if |
| 49 | ······························the·system·is·32-bit·and·also·supports·the | 26 | ······························the·system·is·32-bit·and·also·supports·the |
| 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 39, 37 lines modified | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 68 | ···········································································validated. | 45 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 125 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 667781/685808 bytes (97.37%) of diff not shown. | |||
| Offset 40, 14 lines modified | Offset 40, 57 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·7's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td>Disable·SSH·Root·Login</td> | 91 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 50 | ········The·root·user·should·never·be·allowed·to·login·to·a | 93 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | 94 | system·directly·over·a·network. |
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 62, 31 lines modified | Offset 105, 51 lines modified | ||
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 107 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 108 | ······</td> |
| 66 | ····</tr> | 109 | ····</tr> |
| 67 | ····<tr> | 110 | ····<tr> |
| 68 | ······<td>3.1.1</td> | 111 | ······<td>3.1.1</td> |
| 69 | ······<td>Disable·GDM· | 112 | ······<td>Disable·GDM·Automatic·Login</td> |
| 70 | ······<td·xml:lang="en-US"> | 113 | ······<td·xml:lang="en-US"> |
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 76 | <pre>[daemon] | 119 | <pre>[daemon] |
| 77 | 120 | AutomaticLoginEnable=false</pre> | |
| 78 | ······</td> | 121 | ······</td> |
| 79 | ······<td·xml:lang="en-US"> | 122 | ······<td·xml:lang="en-US"> |
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 81 | system·security. | 124 | system·security. |
| 82 | ······</td> | 125 | ······</td> |
| 83 | ····</tr> | 126 | ····</tr> |
| 84 | ····<tr> | 127 | ····<tr> |
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 128 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 86 | ······<td>Verify·Only·Root·Has·UID·0</td> | 147 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 87 | ······<td·xml:lang="en-US"> | 148 | ······<td·xml:lang="en-US"> |
| 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 90 | their·UID·changed. | 151 | their·UID·changed. |
| 91 | <br·/> | 152 | <br·/> |
| 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 125, 77 lines modified | Offset 188, 14 lines modified | ||
| 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 127 | misconfiguration·elsewhere. | 190 | misconfiguration·elsewhere. |
| 128 | ······</td> | 191 | ······</td> |
| 129 | ····</tr> | 192 | ····</tr> |
| 130 | ····<tr> | 193 | ····<tr> |
| 131 | ······<td>3.1.1<br/>3.1.5</td> | 194 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 458775/466783 bytes (98.28%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 38 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·7 | 2 | Oracle·Linux·7 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································7's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 3 | ······························································································Even·though·the | 28 | ······························································································Even·though·the |
| 4 | ······························································································communications | 29 | ······························································································communications |
| 5 | ······························································································channel·may·be | 30 | ······························································································channel·may·be |
| 6 | ······························································································encrypted,·an | 31 | ······························································································encrypted,·an |
| 7 | ······························································································additional·layer·of | 32 | ······························································································additional·layer·of |
| 8 | ······························································································security·is·gained | 33 | ······························································································security·is·gained |
| 9 | ······························································································by·extending·the | 34 | ······························································································by·extending·the |
| Offset 22, 23 lines modified | Offset 47, 34 lines modified | ||
| 22 | ······························································································actions·performed·on | 47 | ······························································································actions·performed·on |
| 23 | ······························································································the·system·and·also | 48 | ······························································································the·system·and·also |
| 24 | ······························································································helps·to·minimize | 49 | ······························································································helps·to·minimize |
| 25 | ······························································································direct·attack | 50 | ······························································································direct·attack |
| 26 | ······························································································attempts·on·root's | 51 | ······························································································attempts·on·root's |
| 27 | ······························································································password. | 52 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ······································· | 54 | ·······································automatically·login·without·user·interaction·or |
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 58 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 34 | ······································· | 59 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 35 | ·······································etc/gdm/custom.conf.·For·example: | 60 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 36 | ·······································[daemon] | 61 | ·······································[daemon] |
| 37 | ······································· | 62 | ·······································AutomaticLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 38 | ······························································································An·account·has·root | 74 | ······························································································An·account·has·root |
| 39 | ······························································································authority·if·it·has | 75 | ······························································································authority·if·it·has |
| 40 | ······························································································a·UID·of·0.·Multiple | 76 | ······························································································a·UID·of·0.·Multiple |
| 41 | ······························································································accounts·with·a·UID | 77 | ······························································································accounts·with·a·UID |
| 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 61, 129 lines modified | Offset 97, 104 lines modified | ||
| 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 67 | ·······································passwords. | 103 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 76 | ······························································································ | 104 | ······························································································Preventing·direct |
| 77 | ······························································································o | 105 | ······························································································root·login·to·serial |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 78 | ······························································································ | 111 | ······························································································root·account. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 79 | ······························································································This·prevents | 122 | ······························································································This·prevents |
| 80 | ······························································································attackers·with | 123 | ······························································································attackers·with |
| 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 87 | ·······································emergency.service.·····································prevented·by | 130 | ·······································emergency.service.·····································prevented·by |
| 88 | ······························································································configuring·the | 131 | ······························································································configuring·the |
| 89 | ······························································································bootloader·password. | 132 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| Max diff block lines reached; 801857/819804 bytes (97.81%) of diff not shown. | |||
| Offset 8560, 18 lines modified | Offset 8560, 18 lines modified | ||
| 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021760:·725f·736e·6d70·645f·72 | 00021760:·725f·736e·6d70·645f·726f·5f73·7472·696e··r_snmpd_ro_strin | ||
| 00021770:·673d·6368·616e·6765·6d65·72 | 00021770:·673d·6368·616e·6765·6d65·726f·3c62·722f··g=changemero<br/ | ||
| 00021780:·3e76·6172·5f73·6e6d·7064·5f72· | 00021780:·3e76·6172·5f73·6e6d·7064·5f72·775f·7374··>var_snmpd_rw_st | ||
| 00021790:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021790:·7269·6e67·3d63·6861·6e67·656d·6572·773c··ring=changemerw< | ||
| 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2919, 16 lines modified | Offset 2919, 16 lines modified | ||
| 2919 | ··············································································network·management | 2919 | ··············································································network·management |
| 2920 | ··············································································protocol·(SNMP) | 2920 | ··············································································protocol·(SNMP) |
| 2921 | ··············································································community·strings | 2921 | ··············································································community·strings |
| 2922 | ··············································································must·be·changed·to | 2922 | ··············································································must·be·changed·to |
| 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2925 | ··································private.·This·profile·configures·new·read-··running·with·the | 2925 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the | 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the |
| 2931 | ··············································································network·and·use·the | 2931 | ··············································································network·and·use·the |
| 2932 | ··············································································information·to | 2932 | ··············································································information·to |
| 2933 | ··············································································potentially | 2933 | ··············································································potentially |
| 2934 | ··············································································compromise·the | 2934 | ··············································································compromise·the |
| Offset 63, 14949 lines modified | Offset 63, 14949 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (977 lines added, 977 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·2 | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | ||
| 00000470:·7 | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:· | 00000480:·2020·2020·2020·3c74·643e·456e·7375·7265········<td>Ensure | ||
| 00000490:· | 00000490:·2061·7564·6974·6420·436f·6c6c·6563·7473···auditd·Collects | ||
| 000004a0:·20 | 000004a0:·2049·6e66·6f72·6d61·7469·6f6e·206f·6e20···Information·on· | ||
| 000004b0:· | 000004b0:·7468·6520·5573·6520·6f66·2050·7269·7669··the·Use·of·Privi | ||
| 000004c0:· | 000004c0:·6c65·6765·6420·436f·6d6d·616e·6473·202d··leged·Commands·- | ||
| 000004d0:· | 000004d0:·2073·7368·2d6b·6579·7369·676e·3c2f·7464···ssh-keysign</td | ||
| 000004e0:· | 000004e0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 000004f0:·6 | 000004f0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000500:· | 00000500:·2020·2020·2020·4174·2061·206d·696e·696d········At·a·minim | ||
| 00000510:· | 00000510:·756d·2c20·7468·6520·6175·6469·7420·7379··um,·the·audit·sy | ||
| 00000520:· | 00000520:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000530:· | 00000530:·6563·7420·7468·6520·6578·6563·7574·696f··ect·the·executio | ||
| 00000540:·6 | 00000540:·6e20·6f66·0a70·7269·7669·6c65·6765·6420··n·of.privileged· | ||
| 00000550:·6 | 00000550:·636f·6d6d·616e·6473·2066·6f72·2061·6c6c··commands·for·all | ||
| 00000560:·2 | 00000560:·2075·7365·7273·2061·6e64·2072·6f6f·742e···users·and·root. | ||
| 00000570:· | 00000570:·2049·6620·7468·6520·3c74·743e·6175·6469···If·the·<tt>audi | ||
| 00000580:· | 00000580:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000590:· | 00000590:·730a·636f·6e66·6967·7572·6564·2074·6f20··s.configured·to· | ||
| 000005a0:· | 000005a0:·7573·6520·7468·6520·3c74·743e·6175·6765··use·the·<tt>auge | ||
| 000005b0:·6e | 000005b0:·6e72·756c·6573·3c2f·7474·3e20·7072·6f67··nrules</tt>·prog | ||
| 000005c0:· | 000005c0:·7261·6d20·746f·2072·6561·6420·6175·6469··ram·to·read·audi | ||
| 000005d0:· | 000005d0:·7420·7275·6c65·7320·6475·7269·6e67·0a64··t·rules·during.d | ||
| 000005e0:· | 000005e0:·6165·6d6f·6e20·7374·6172·7475·7020·2874··aemon·startup·(t | ||
| 000005f0:· | 000005f0:·6865·2064·6566·6175·6c74·292c·2061·6464··he·default),·add | ||
| 00000600:· | 00000600:·2061·206c·696e·6520·6f66·2074·6865·2066···a·line·of·the·f | ||
| 00000610:·6 | 00000610:·6f6c·6c6f·7769·6e67·2066·6f72·6d20·746f··ollowing·form·to | ||
| 00000620:· | 00000620:·2061·2066·696c·6520·7769·7468·0a73·7566···a·file·with.suf | ||
| 00000630:· | 00000630:·6669·7820·3c74·743e·2e72·756c·6573·3c2f··fix·<tt>.rules</ | ||
| 00000640:· | 00000640:·7474·3e20·696e·2074·6865·2064·6972·6563··tt>·in·the·direc | ||
| 00000650:· | 00000650:·746f·7279·203c·7474·3e2f·6574·632f·6175··tory·<tt>/etc/au | ||
| 00000660:· | 00000660:·6469·742f·7275·6c65·732e·643c·2f74·743e··dit/rules.d</tt> | ||
| 00000670:·3 | 00000670:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 00000680:· | 00000680:·2c65·7869·7420·2d46·2070·6174·683d·2f75··,exit·-F·path=/u | ||
| 00000690:· | 00000690:·7372·2f6c·6962·6578·6563·2f6f·7065·6e73··sr/libexec/opens | ||
| 000006a0:·73 | 000006a0:·7368·2f73·7368·2d6b·6579·7369·676e·202d··sh/ssh-keysign·- | ||
| 000006b0:· | 000006b0:·4620·7065·726d·3d78·202d·4620·6175·6964··F·perm=x·-F·auid | ||
| 000006c0:· | 000006c0:·2667·743b·3d31·3030·3020·2d46·2061·7569··>=1000·-F·aui | ||
| 000006d0:·6 | 000006d0:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 000006e0:· | 000006e0:·7072·6976·696c·6567·6564·3c2f·7072·653e··privileged</pre> | ||
| 000006f0:· | 000006f0:·0a49·6620·7468·6520·3c74·743e·6175·6469··.If·the·<tt>audi | ||
| 00000700:·74 | 00000700:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000710:·73 | 00000710:·7320·636f·6e66·6967·7572·6564·2074·6f20··s·configured·to· | ||
| 00000720:· | 00000720:·7573·6520·7468·6520·3c74·743e·6175·6469··use·the·<tt>audi | ||
| 00000730:·74 | 00000730:·7463·746c·3c2f·7474·3e0a·7574·696c·6974··tctl</tt>.utilit | ||
| 00000740:· | 00000740:·7920·746f·2072·6561·6420·6175·6469·7420··y·to·read·audit· | ||
| 00000750:· | 00000750:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 00000760:· | 00000760:·6d6f·6e20·7374·6172·7475·702c·2061·6464··mon·startup,·add | ||
| 00000770:· | 00000770:·2061·206c·696e·6520·6f66·2074·6865·2066···a·line·of·the·f | ||
| 00000780:· | 00000780:·6f6c·6c6f·7769·6e67·0a66·6f72·6d20·746f··ollowing.form·to | ||
| 00000790:· | 00000790:·203c·7474·3e2f·6574·632f·6175·6469·742f···<tt>/etc/audit/ | ||
| 000007a0:· | 000007a0:·6175·6469·742e·7275·6c65·733c·2f74·743e··audit.rules</tt> | ||
| 000007b0:· | 000007b0:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 000007c0:· | 000007c0:·2c65·7869·7420·2d46·2070·6174·683d·2f75··,exit·-F·path=/u | ||
| 000007d0:·7 | 000007d0:·7372·2f6c·6962·6578·6563·2f6f·7065·6e73··sr/libexec/opens | ||
| 000007e0:· | 000007e0:·7368·2f73·7368·2d6b·6579·7369·676e·202d··sh/ssh-keysign·- | ||
| 000007f0:· | 000007f0:·4620·7065·726d·3d78·202d·4620·6175·6964··F·perm=x·-F·auid | ||
| 00000800:· | 00000800:·2667·743b·3d31·3030·3020·2d46·2061·7569··>=1000·-F·aui | ||
| 00000810:· | 00000810:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 00000820:· | 00000820:·7072·6976·696c·6567·6564·3c2f·7072·653e··privileged</pre> | ||
| 00000830:· | 00000830:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00000840:· | 00000840:·2020·203c·7464·2078·6d6c·3a6c·616e·673d·····<td·xml:lang= | ||
| 00000850:·2 | 00000850:·2265·6e2d·5553·223e·0a20·2020·2020·2020··"en-US">.······· | ||
| 00000860:· | 00000860:·204d·6973·7573·6520·6f66·2070·7269·7669···Misuse·of·privi | ||
| 00000870:·6 | 00000870:·6c65·6765·6420·6675·6e63·7469·6f6e·732c··leged·functions, | ||
| 00000880:· | 00000880:·2065·6974·6865·7220·696e·7465·6e74·696f···either·intentio | ||
| 00000890:· | 00000890:·6e61·6c6c·7920·6f72·2075·6e69·6e74·656e··nally·or·uninten | ||
| 000008a0:· | 000008a0:·7469·6f6e·616c·6c79·2062·790a·6175·7468··tionally·by.auth | ||
| 000008b0:·6f7 | 000008b0:·6f72·697a·6564·2075·7365·7273·2c20·6f72··orized·users,·or | ||
| 000008c0:· | 000008c0:·2062·7920·756e·6175·7468·6f72·697a·6564···by·unauthorized | ||
| 000008d0:· | 000008d0:·2065·7874·6572·6e61·6c20·656e·7469·7469···external·entiti | ||
| 000008e0:· | 000008e0:·6573·2074·6861·7420·6861·7665·2063·6f6d··es·that·have·com | ||
| 000008f0:· | 000008f0:·7072·6f6d·6973·6564·2073·7973·7465·6d20··promised·system· | ||
| 00000900:·6 | 00000900:·6163·636f·756e·7473·2c0a·6973·2061·2073··accounts,.is·a·s | ||
| 00000910:· | 00000910:·6572·696f·7573·2061·6e64·206f·6e67·6f69··erious·and·ongoi | ||
| 00000920:· | 00000920:·6e67·2063·6f6e·6365·726e·2061·6e64·2063··ng·concern·and·c | ||
| 00000930:· | 00000930:·616e·2068·6176·6520·7369·676e·6966·6963··an·have·signific | ||
| 00000940:· | 00000940:·616e·7420·6164·7665·7273·6520·696d·7061··ant·adverse·impa | ||
| 00000950:· | 00000950:·6374·7320·6f6e·206f·7267·616e·697a·6174··cts·on·organizat | ||
| 00000960:· | 00000960:·696f·6e73·2e0a·4175·6469·7469·6e67·2074··ions..Auditing·t | ||
| 00000970:·6 | 00000970:·6865·2075·7365·206f·6620·7072·6976·696c··he·use·of·privil | ||
| 00000980:·657 | 00000980:·6567·6564·2066·756e·6374·696f·6e73·2069··eged·functions·i | ||
| 00000990:·7320·6f6 | 00000990:·7320·6f6e·6520·7761·7920·746f·2064·6574··s·one·way·to·det | ||
| 000009a0:· | 000009a0:·6563·7420·7375·6368·206d·6973·7573·6520··ect·such·misuse· | ||
| 000009b0:·6 | 000009b0:·616e·6420·6964·656e·7469·6679·0a74·6865··and·identify.the | ||
| 000009c0:· | 000009c0:·2072·6973·6b20·6672·6f6d·2069·6e73·6964···risk·from·insid | ||
| 000009d0:·6 | 000009d0:·6572·2061·6e64·2061·6476·616e·6365·6420··er·and·advanced· | ||
| 000009e0:·7 | 000009e0:·7065·7273·6973·7465·6e74·2074·6872·6561··persistent·threa | ||
| 000009f0:·7 | 000009f0:·7473·2e0a·3c62·7220·2f3e·3c62·7220·2f3e··ts..<br·/><br·/> | ||
| 00000a00:· | 00000a00:·0a50·7269·7669·6c65·6765·6420·7072·6f67··.Privileged·prog | ||
| 00000a10:· | 00000a10:·7261·6d73·2061·7265·2073·7562·6a65·6374··rams·are·subject | ||
| 00000a20:·20 | 00000a20:·2074·6f20·6573·6361·6c61·7469·6f6e·2d6f···to·escalation-o | ||
| 00000a30:· | 00000a30:·662d·7072·6976·696c·6567·6520·6174·7461··f-privilege·atta | ||
| 00000a40:· | 00000a40:·636b·732c·0a77·6869·6368·2061·7474·656d··cks,.which·attem | ||
| 00000a50:· | 00000a50:·7074·2074·6f20·7375·6276·6572·7420·7468··pt·to·subvert·th | ||
| 00000a60:· | 00000a60:·6569·7220·6e6f·726d·616c·2072·6f6c·6520··eir·normal·role· | ||
| 00000a70:· | 00000a70:·6f66·2070·726f·7669·6469·6e67·2073·6f6d··of·providing·som | ||
| 00000a80:· | 00000a80:·6520·6e65·6365·7373·6172·7920·6275·740a··e·necessary·but. | ||
| 00000a90:·6 | 00000a90:·6c69·6d69·7465·6420·6361·7061·6269·6c69··limited·capabili | ||
| 00000aa0:· | 00000aa0:·7479·2e20·4173·2073·7563·682c·206d·6f74··ty.·As·such,·mot | ||
| 00000ab0:· | 00000ab0:·6976·6174·696f·6e20·6578·6973·7473·2074··ivation·exists·t | ||
| 00000ac0:· | 00000ac0:·6f20·6d6f·6e69·746f·7220·7468·6573·6520··o·monitor·these· | ||
| 00000ad0:· | 00000ad0:·7072·6f67·7261·6d73·2066·6f72·0a75·6e75··programs·for.unu | ||
| 00000ae0:·7 | 00000ae0:·7375·616c·2061·6374·6976·6974·792e·0a20··sual·activity..· | ||
| 00000af0:· | 00000af0:·2020·2020·203c·2f74·643e·0a20·2020·203c·······</td>.····< | ||
| 00000b00:·7 | 00000b00:·2f74·723e·0a20·2020·203c·7472·3e0a·2020··/tr>.····<tr>.·· | ||
| 00000b10:· | 00000b10:·2020·2020·3c74·643e·4155·2d32·2864·293c······<td>AU-2(d)< | ||
| 00000b20:· | 00000b20:·6272·2f3e·4155·2d31·3228·6329·3c62·722f··br/>AU-12(c)<br/ | ||
| 00000b30:· | 00000b30:·3e43·4d2d·3628·6129·3c2f·7464·3e0a·2020··>CM-6(a)</td>.·· | ||
| 00000b40:·202 | 00000b40:·2020·2020·3c74·643e·5265·636f·7264·2045······<td>Record·E | ||
| 00000b50:· | 00000b50:·7665·6e74·7320·7468·6174·204d·6f64·6966··vents·that·Modif | ||
| 00000b60:·7 | 00000b60:·7920·7468·6520·5379·7374·656d·2773·2044··y·the·System's·D | ||
| 00000b70:· | 00000b70:·6973·6372·6574·696f·6e61·7279·2041·6363··iscretionary·Acc | ||
| 00000b80:· | 00000b80:·6573·7320·436f·6e74·726f·6c73·202d·206c··ess·Controls·-·l | ||
| 00000b90:·3 | 00000b90:·7365·7478·6174·7472·3c2f·7464·3e0a·2020··setxattr</td>.·· | ||
| 00000ba0:· | 00000ba0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 00000bb0:· | 00000bb0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| Max diff block lines reached; 7284730/7420134 bytes (98.18%) of diff not shown. | |||
| Offset 75, 14 lines modified | Offset 75, 33 lines modified | ||
| 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 77 | page·for·futher·information. | 77 | page·for·futher·information. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>AVA_VAN.1</td> | 81 | ······<td>AVA_VAN.1</td> |
| 82 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation·in·zIPL</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 85 | allocation,·check·that·all·boot·entries·in | ||
| 86 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 87 | included·in·its·options.<br·/> | ||
| 88 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 89 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 90 | ······</td> | ||
| 91 | ······<td·xml:lang="en-US"> | ||
| 92 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 93 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 94 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 95 | preventing·data·leaks. | ||
| 96 | ······</td> | ||
| 97 | ····</tr> | ||
| 98 | ····<tr> | ||
| 99 | ······<td>AVA_VAN.1</td> | ||
| 82 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> | 100 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> |
| 83 | ······<td·xml:lang="en-US"> | 101 | ······<td·xml:lang="en-US"> |
| 84 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that | 102 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that |
| 85 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have | 103 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have |
| 86 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> | 104 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> |
| 87 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed | 105 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed |
| Offset 99, 14 lines modified | Offset 118, 34 lines modified | ||
| 99 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | 118 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command |
| 100 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | 119 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache |
| 101 | architecture. | 120 | architecture. |
| 102 | ······</td> | 121 | ······</td> |
| 103 | ····</tr> | 122 | ····</tr> |
| 104 | ····<tr> | 123 | ····<tr> |
| 105 | ······<td>AVA_VAN.1</td> | 124 | ······<td>AVA_VAN.1</td> |
| 125 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> | ||
| 126 | ······<td·xml:lang="en-US"> | ||
| 127 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the | ||
| 128 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 129 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line | ||
| 130 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the | ||
| 131 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 132 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 133 | <pre>GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."</pre> | ||
| 134 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"</pre> | ||
| 135 | ······</td> | ||
| 136 | ······<td·xml:lang="en-US"> | ||
| 137 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 138 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 139 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 140 | preventing·data·leaks. | ||
| 141 | ······</td> | ||
| 142 | ····</tr> | ||
| 143 | ····<tr> | ||
| 144 | ······<td>AVA_VAN.1</td> | ||
| 106 | ······<td>Enable·randomization·of·the·page·allocator</td> | 145 | ······<td>Enable·randomization·of·the·page·allocator</td> |
| 107 | ······<td·xml:lang="en-US"> | 146 | ······<td·xml:lang="en-US"> |
| 108 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the | 147 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the |
| 109 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. | 148 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. |
| 110 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line | 149 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line |
| 111 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the | 150 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the |
| 112 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | 151 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within |
| Offset 124, 50 lines modified | Offset 163, 27 lines modified | ||
| 124 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating | 163 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating |
| 125 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | 164 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command |
| 126 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | 165 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache |
| 127 | architecture. | 166 | architecture. |
| 128 | ······</td> | 167 | ······</td> |
| 129 | ····</tr> | 168 | ····</tr> |
| 130 | ····<tr> | 169 | ····<tr> |
| 131 | ······<td> | 170 | ······<td>FAU_GEN.1</td> |
| 171 | ······<td>Configure·auditd·flush·priority</td> | ||
| 132 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the | ||
| 135 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 136 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line | ||
| 137 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the | ||
| 138 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 139 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 140 | <pre>GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."</pre> | ||
| 141 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"</pre> | ||
| 142 | ······</td> | ||
| 143 | ······<td·xml:lang="en-US"> | ||
| 144 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 145 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 146 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 147 | preventing·data·leaks. | ||
| 148 | ······</td> | ||
| 149 | ····</tr> | ||
| 150 | ····<tr> | ||
| 151 | ······<td>AVA_VAN.1</td> | ||
| 152 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation·in·zIPL</td> | ||
| 153 | ······<td·xml:lang="en-US"> | 172 | ······<td·xml:lang="en-US"> |
| 173 | ········The·<tt>auditd</tt>·service·can·be·configured·to | ||
| 174 | synchronously·write·audit·event·data·to·disk.·Add·or·correct·the·following | ||
| 175 | line·in·<tt>/etc/audit/auditd.conf</tt>·to·ensure·that·audit·event·data·is | ||
| 176 | fully·synchronized·with·the·log·files·on·the·disk: | ||
| 177 | <pre>flush·=·<abbr·title="$var_auditd_flush"><tt>data</tt></abbr></pre> | ||
| 154 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 155 | allocation,·check·that·all·boot·entries·in | ||
| 156 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 157 | included·in·its·options.<br·/> | ||
| 158 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 159 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 160 | ······</td> | 178 | ······</td> |
| 161 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 180 | ········Audit·data·should·be·synchronously·written·to·disk·to·ensure | ||
| 181 | log·integrity.·These·parameters·assure·that·all·audit·event·data·is·fully | ||
| 182 | synchronized·with·the·log·files·on·the·disk. | ||
| 162 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 163 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 164 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 165 | preventing·data·leaks. | ||
| 166 | ······</td> | 183 | ······</td> |
| 167 | ····</tr> | 184 | ····</tr> |
| 168 | ····<tr> | 185 | ····<tr> |
| 169 | ······<td>FAU_GEN.1</td> | 186 | ······<td>FAU_GEN.1</td> |
| 170 | ······<td>Disable·SSH·Root·Login</td> | 187 | ······<td>Disable·SSH·Root·Login</td> |
| 171 | ······<td·xml:lang="en-US"> | 188 | ······<td·xml:lang="en-US"> |
| Max diff block lines reached; 241297/247608 bytes (97.45%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 23 lines modified | ||
| 34 | ·························································································································the·SCAP·Workbench·GUI·tool | 34 | ·························································································································the·SCAP·Workbench·GUI·tool |
| 35 | ·························································································································from·the·scap-workbench | 35 | ·························································································································from·the·scap-workbench |
| 36 | ·························································································································package,·to·verify·that·the | 36 | ·························································································································package,·to·verify·that·the |
| 37 | ·························································································································system·conforms·to·provided | 37 | ·························································································································system·conforms·to·provided |
| 38 | ·························································································································guidelines.·Refer·to·the | 38 | ·························································································································guidelines.·Refer·to·the |
| 39 | ·························································································································scap-security-guide(8)·manual | 39 | ·························································································································scap-security-guide(8)·manual |
| 40 | ·························································································································page·for·futher·information. | 40 | ·························································································································page·for·futher·information. |
| 41 | ·························································································································When·the·kernel·configuration | ||
| 42 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 43 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 44 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 45 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 46 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 47 | ·················zIPL···········allocation,·add·init_on_alloc=1·to·/etc/kernel/cmdline.··································kinds·of·"uninitialized·heap | ||
| 48 | ·························································································································memory"·flaws,·effectively | ||
| 49 | ·························································································································preventing·data·leaks. | ||
| 41 | ·························································································································The | 50 | ·························································································································The |
| 42 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | 51 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 43 | ·························································································································config·option·is·primarily | 52 | ·························································································································config·option·is·primarily |
| 44 | ·························································································································focused·on·improving·the | 53 | ·························································································································focused·on·improving·the |
| 45 | ·························································································································average·utilization·of·a | 54 | ·························································································································average·utilization·of·a |
| 46 | ·························································································································direct-mapped·memory-side- | 55 | ·························································································································direct-mapped·memory-side- |
| 47 | ·························································································································cache.·Aside·of·this | 56 | ·························································································································cache.·Aside·of·this |
| Offset 59, 14 lines modified | Offset 68, 23 lines modified | ||
| 59 | ·························································································································applications·allocating | 68 | ·························································································································applications·allocating |
| 60 | ·························································································································memory·ouf·of·that·node.·The | 69 | ·························································································································memory·ouf·of·that·node.·The |
| 61 | ·························································································································page_alloc.shuffle=1·kernel | 70 | ·························································································································page_alloc.shuffle=1·kernel |
| 62 | ·························································································································command·line·parameter·then | 71 | ·························································································································command·line·parameter·then |
| 63 | ·························································································································forces·this·functionality | 72 | ·························································································································forces·this·functionality |
| 64 | ·························································································································irrespectively·of·memory | 73 | ·························································································································irrespectively·of·memory |
| 65 | ·························································································································cache·architecture. | 74 | ·························································································································cache·architecture. |
| 75 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration | ||
| 76 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is | ||
| 77 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator | ||
| 78 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory | ||
| 79 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when | ||
| 80 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many | ||
| 81 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap | ||
| 82 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively | ||
| 83 | ·························································································································preventing·data·leaks. | ||
| 66 | ·························································································································The | 84 | ·························································································································The |
| 67 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | 85 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 68 | ·························································································································config·option·is·primarily | 86 | ·························································································································config·option·is·primarily |
| 69 | ·························································································································focused·on·improving·the | 87 | ·························································································································focused·on·improving·the |
| 70 | ·························································································································average·utilization·of·a | 88 | ·························································································································average·utilization·of·a |
| 71 | ·························································································································direct-mapped·memory-side- | 89 | ·························································································································direct-mapped·memory-side- |
| 72 | ·························································································································cache.·Aside·of·this | 90 | ·························································································································cache.·Aside·of·this |
| Offset 84, 178 lines modified | Offset 102, 145 lines modified | ||
| 84 | ·························································································································applications·allocating | 102 | ·························································································································applications·allocating |
| 85 | ·························································································································memory·ouf·of·that·node.·The | 103 | ·························································································································memory·ouf·of·that·node.·The |
| 86 | ·························································································································page_alloc.shuffle=1·kernel | 104 | ·························································································································page_alloc.shuffle=1·kernel |
| 87 | ·························································································································command·line·parameter·then | 105 | ·························································································································command·line·parameter·then |
| 88 | ·························································································································forces·this·functionality | 106 | ·························································································································forces·this·functionality |
| 89 | ·························································································································irrespectively·of·memory | 107 | ·························································································································irrespectively·of·memory |
| 90 | ·························································································································cache·architecture. | 108 | ·························································································································cache·architecture. |
| 91 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration | ||
| 92 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is | ||
| 93 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator | ||
| 94 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory | ||
| 95 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when | ||
| 96 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many | ||
| 97 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap | ||
| 98 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively | ||
| 99 | ························································································································· | 109 | ·························································································································Audit·data·should·be |
| 110 | ································The·auditd·service·can·be·configured·to·synchronously·write·audit·event·data·to·disk.····synchronously·written·to·disk | ||
| 111 | ·················Configure······Add·or·correct·the·following·line·in·/etc/audit/auditd.conf·to·ensure·that·audit·event···to·ensure·log·integrity. | ||
| 112 | FAU_GEN.1········auditd·flush···data·is·fully·synchronized·with·the·log·files·on·the·disk:·······························These·parameters·assure·that | ||
| 113 | ·················priority·······flush·=·data·············································································all·audit·event·data·is·fully | ||
| 100 | ························································································································· | 114 | ·························································································································synchronized·with·the·log |
| 101 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 102 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 103 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 104 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 105 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 106 | ·················zIPL···········allocation,·add·init_on_alloc=1·to·/etc/kernel/cmdline.··································kinds·of·"uninitialized·heap | ||
| 107 | ·························································································································memory"·flaws,·effectively | ||
| 108 | ························································································································· | 115 | ·························································································································files·on·the·disk. |
| 109 | ·························································································································Even·though·the | 116 | ·························································································································Even·though·the |
| 110 | ·························································································································communications·channel·may·be | 117 | ·························································································································communications·channel·may·be |
| 111 | ·························································································································encrypted,·an·additional | 118 | ·························································································································encrypted,·an·additional |
| 112 | ·························································································································layer·of·security·is·gained | 119 | ·························································································································layer·of·security·is·gained |
| 113 | ·························································································································by·extending·the·policy·of | 120 | ·························································································································by·extending·the·policy·of |
| 114 | ································The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···not·logging·directly·on·as | 121 | ································The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···not·logging·directly·on·as |
| 115 | FAU_GEN.1········Disable·SSH····disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···root.·In·addition,·logging·in | 122 | FAU_GEN.1········Disable·SSH····disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···root.·In·addition,·logging·in |
| 116 | ·················Root·Login·····PermitRootLogin·no·······································································with·a·user-specific·account | 123 | ·················Root·Login·····PermitRootLogin·no·······································································with·a·user-specific·account |
| 117 | ·························································································································provides·individual | 124 | ·························································································································provides·individual |
| 118 | ·························································································································accountability·of·actions | 125 | ·························································································································accountability·of·actions |
| 119 | ·························································································································performed·on·the·system·and | 126 | ·························································································································performed·on·the·system·and |
| 120 | ·························································································································also·helps·to·minimize·direct | 127 | ·························································································································also·helps·to·minimize·direct |
| 121 | ·························································································································attack·attempts·on·root's | 128 | ·························································································································attack·attempts·on·root's |
| 122 | ·························································································································password. | 129 | ·························································································································password. |
| 130 | ·························································································································Without·establishing·what | ||
| 131 | ·························································································································type·of·events·occurred,·it | ||
| 132 | ·························································································································would·be·difficult·to | ||
| 133 | ·························································································································establish,·correlate,·and | ||
| 134 | ·························································································································investigate·the·events | ||
| 135 | ·························································································································leading·up·to·an·outage·or | ||
| 136 | ·························································································································attack.·Ensuring·the·auditd | ||
| 137 | ·························································································································service·is·active·ensures | ||
| 138 | ································The·auditd·service·is·an·essential·userspace·component·of·the·Linux·Auditing·System,·as··audit·records·generated·by | ||
| 139 | FAU_GEN.1········Enable·auditd··it·is·responsible·for·writing·audit·records·to·disk.·The·auditd·service·can·be·enabled···the·kernel·are·appropriately | ||
| 140 | ·················Service········with·the·following·command:······························································recorded. | ||
| 141 | ································$·sudo·systemctl·enable·auditd.service | ||
| 142 | ·························································································································Additionally,·a·properly | ||
| 143 | ·························································································································configured·audit·subsystem | ||
| 144 | ·························································································································ensures·that·actions·of | ||
| 145 | ·························································································································individual·system·users·can | ||
| 146 | ·························································································································be·uniquely·traced·to·those | ||
| 147 | ·························································································································users·so·they·can·be·held | ||
| 148 | ·························································································································accountable·for·their | ||
| 149 | ·························································································································actions. | ||
| 123 | ·························································································································Each·process·on·the·system | 150 | ·························································································································Each·process·on·the·system |
| 124 | ·························································································································carries·an·"auditable"·flag | 151 | ·························································································································carries·an·"auditable"·flag |
| 125 | ·························································································································which·indicates·whether·its | 152 | ·························································································································which·indicates·whether·its |
| 126 | ·················Enable·········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be·audited. | 153 | ·················Enable·········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be·audited. |
| 127 | ·················Auditing·to····daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·Although·auditd·takes·care·of | 154 | ·················Auditing·to····daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·Although·auditd·takes·care·of |
| 128 | FAU_GEN.1········Start·Prior·to·in·its·options.··········································································enabling·this·for·all | 155 | FAU_GEN.1········Start·Prior·to·in·its·options.··········································································enabling·this·for·all |
| 129 | ·················the·Audit······To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···processes·which·launch·after | 156 | ·················the·Audit······To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···processes·which·launch·after |
| 130 | ·················Daemon·in·zIPL·etc/kernel/cmdline.······································································it·does,·adding·the·kernel | 157 | ·················Daemon·in·zIPL·etc/kernel/cmdline.······································································it·does,·adding·the·kernel |
| 131 | ·························································································································argument·ensures·it·is·set | 158 | ·························································································································argument·ensures·it·is·set |
| 132 | ·························································································································for·every·process·during | 159 | ·························································································································for·every·process·during |
| 133 | ·························································································································boot. | 160 | ·························································································································boot. |
| 134 | ································Perform·basic·configuration·of·Audit·system.·Make·sure·that·any·previously·defined·rules | ||
| 135 | ································are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in | ||
| 136 | ································cases·of·failure,·messages·are·configured·to·be·directed·to·system·log.·The·following | ||
| 137 | ································rules·configure·audit·as·described·above: | ||
| 138 | ································##·First·rule·-·delete·all | ||
| Max diff block lines reached; 367259/387320 bytes (94.82%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 24 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 174 | ······</td> | 176 | ······</td> |
| 175 | ····</tr> | 177 | ····</tr> |
| 176 | ····<tr> | 178 | ····<tr> |
| 177 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 179 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 187, 26 lines modified | Offset 189, 24 lines modified | ||
| 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 189 | enables·the·system·to·continue·servicing·valid·connection·requests. | 191 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 190 | ······</td> | 192 | ······</td> |
| 191 | ····</tr> | 193 | ····</tr> |
| 192 | ····<tr> | 194 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 195 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 196 | ······<td>Install·iptables·Package</td> |
| 195 | ······<td·xml:lang="en-US"> | 197 | ······<td·xml:lang="en-US"> |
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | netwo | 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 199 | ······</td> | 201 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 202 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 23 lines modified | Offset 246, 40 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 294353/300196 bytes (98.05%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 23 lines modified | Offset 112, 31 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 119 | ···················································································· | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 120 | ···················································································· | 125 | ····················································································system.·The |
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 121 | ····················································································network· | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································s | 132 | ····················································································should·ignore |
| 126 | ····················································································an | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | ||
| 127 | ···················································································· | 135 | ····················································································spoofing·measure. |
| 128 | ····················································································A·TCP·SYN·flood | 136 | ····················································································A·TCP·SYN·flood |
| 129 | ····················································································attack·can·cause·a | 137 | ····················································································attack·can·cause·a |
| 130 | ····················································································denial·of·service | 138 | ····················································································denial·of·service |
| 131 | ····················································································by·filling·a | 139 | ····················································································by·filling·a |
| 132 | ····················································································system's·TCP | 140 | ····················································································system's·TCP |
| 133 | ····················································································connection·table | 141 | ····················································································connection·table |
| 134 | ····················································································with·connections·in | 142 | ····················································································with·connections·in |
| Offset 147, 31 lines modified | Offset 155, 23 lines modified | ||
| 147 | ····················································································flood·condition·is | 155 | ····················································································flood·condition·is |
| 148 | ····················································································detected,·and | 156 | ····················································································detected,·and |
| 149 | ····················································································enables·the·system | 157 | ····················································································enables·the·system |
| 150 | ····················································································to·continue | 158 | ····················································································to·continue |
| 151 | ····················································································servicing·valid | 159 | ····················································································servicing·valid |
| 152 | ····················································································connection | 160 | ····················································································connection |
| 153 | ····················································································requests. | 161 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································p | 162 | ····················································································iptables·controls |
| 157 | ···················································································· | 163 | ····················································································the·Linux·kernel |
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·packet |
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 165 | ····················································································s | 168 | ····················································································set·up·firewalls |
| 166 | ····················································································other·interfaces | ||
| 167 | ···················································································· | 169 | ····················································································and·IP |
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ····················································································s | 170 | ····················································································masquerading,·etc. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 24 lines modified | Offset 187, 54 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 482285/495872 bytes (97.26%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d4 | 00000450:·3c74·643e·456e·7375·7265·2053·4d45·5020··<td>Ensure·SMEP· | ||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d4 | 000004a0:·2020·2020·2054·6865·2053·4d45·5020·6973·······The·SMEP·is | ||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000004d0:·6d6f·6465·2066·726f·6d20· | 000004d0:·6d6f·6465·2066·726f·6d20·6578·6563·7574··mode·from·execut | ||
| 000004e0:·696e·6720·7573·6572·2073·7061·6365·2063··ing·user·space·c | |||
| 000004f0:·6f64·652c·0a69·7420·6973·2065·6e61·626c··ode,.it·is·enabl | |||
| 00000500:·6564·2062·7920·6465·6661·756c·7420·7369··ed·by·default·si | |||
| 00000510:·6e63·6520·4c69·6e75·7820·6b65·726e·656c··nce·Linux·kernel | |||
| 00000520:·2033·2e30·2e20·4275·7420·6974·2063·6f75···3.0.·But·it·cou | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005 | 00000530:·6c64·2062·6520·6469·7361·626c·6564·2074··ld·be·disabled·t | ||
| 00000540:·6872·6f75·6768·0a6b·6572·6e65·6c20·626f··hrough.kernel·bo | |||
| 00000550:·6f74·2070·6172·616d·6574·6572·732e·0a0a··ot·parameters... | |||
| 00000560:·456e·7375·7265·2074·6861·7420·5375·7065··Ensure·that·Supe | |||
| 00000570:·7276·6973·6f72·204d·6f64·6520·4578·6563··rvisor·Mode·Exec | |||
| 00000580:·7574·696f·6e20·5072·6576·656e·7469·6f6e··ution·Prevention | |||
| 00000590:·2028·534d·4550·2920·6973·206e·6f74·2064···(SMEP)·is·not·d | |||
| 000005a0:·6973·6162·6c65·6420·6279·0a74·6865·203c··isabled·by.the·< | |||
| 000005b0:·7474·3e6e·6f73·6d65·703c·2f74·743e·2062··tt>nosmep</tt>·b | |||
| 000005c0:·6f6f·7420·7061·7261·6d65·6e74·6572·206f··oot·paramenter·o | |||
| 000005d0:·7074·696f·6e2e·0a0a·4368·6563·6b20·7468··ption...Check·th | |||
| 000005e0:·6174·2074·6865·206c·696e·6520·3c70·7265··at·the·line·<pre | |||
| 000005f0:·3e47·5255·425f·434d·444c·494e·455f·4c49··>GRUB_CMDLINE_LI | |||
| 00000600:·4e55·583d·222e·2e2e·223c·2f70·7265·3e20··NUX="..."</pre>· | |||
| 00000610:·7769·7468·696e·203c·7474·3e2f·6574·632f··within·<tt>/etc/ | |||
| 00000620:·6465·6661·756c·742f·6772·7562·3c2f·7474··default/grub</tt | |||
| 00000630:·3e0a·646f·6573·6e27·7420·636f·6e74·6169··>.doesn't·contai | |||
| 00000640:·6e20·7468·6520·6172·6775·6d65·6e74·203c··n·the·argument·< | |||
| 00000650:·7474·3e6e·6f73·6d65·703c·2f74·743e·2e0a··tt>nosmep</tt>.. | |||
| 00000660:·5275·6e20·7468·6520·666f·6c6c·6f77·696e··Run·the·followin | |||
| 00000670:·6720·636f·6d6d·616e·6420·746f·2075·7064··g·command·to·upd | |||
| 00000680:·6174·6520·636f·6d6d·616e·6420·6c69·6e65··ate·command·line | |||
| 00000690:·2066·6f72·2061·6c72·6561·6479·2069·6e73···for·already·ins | |||
| 000006a0:·7461·6c6c·6564·206b·6572·6e65·6c73·3a0a··talled·kernels:. | |||
| 000006b0:·3c70·7265·3e23·2067·7275·6262·7920·2d2d··<pre>#·grubby·-- | |||
| 000006c0:·7570·6461·7465·2d6b·6572·6e65·6c3d·414c··update-kernel=AL | |||
| 000006d0:·4c20·2d2d·7265·6d6f·7665·2d61·7267·733d··L·--remove-args= | |||
| 000006e0:·226e·6f73·6d65·7022·3c2f·7072·653e·0a20··"nosmep"</pre>.· | |||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 000006a0:·2074·6f20·7570·6461·7465·2063·6f6d·6d61···to·update·comma | |||
| 000006b0:·6e64·206c·696e·6520·666f·7220·616c·7265··nd·line·for·alre | |||
| 000006c0:·6164·7920·696e·7374·616c·6c65·6420·6b65··ady·installed·ke | |||
| 000006d0:·726e·656c·733a·0a3c·7072·653e·2320·6772··rnels:.<pre>#·gr | |||
| 000006e0:·7562·6279·202d·2d75·7064·6174·652d·6b65··ubby·--update-ke | |||
| 000006f0:·726e·656c·3d41·4c4c·202d·2d72·656d·6f76··rnel=ALL·--remov | |||
| 00000700:·652d·6172·6773·3d22·6e6f·736d·6170·223c··e-args="nosmap"< | |||
| 00000710:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | |||
| 00000720:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000730:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000740:·2020·2020·2020·4469·7361·626c·696e·6720········Disabling· | |||
| 00000750:·534d·4150·2063·616e·2066·6163·696c·6974··SMAP·can·facilit | |||
| 00000760:·6174·6520·6578·706c·6f69·7461·7469·6f6e··ate·exploitation | |||
| 00000770:·206f·6620·7675·6c6e·6572·6162·696c·6974···of·vulnerabilit | |||
| 00000780:·6965·7320·6361·7573·6564·2062·7920·756e··ies·caused·by·un | |||
| 00000790:·696e·7465·6e64·6564·2061·6363·6573·7320··intended·access· | |||
| 000007a0:·616e·640a·6d61·6e69·7075·6c61·7469·6f6e··and.manipulation | |||
| 000007b0:·206f·6620·6461·7461·2069·6e20·7468·6520···of·data·in·the· | |||
| 000007c0:·7573·6572·2073·7061·6365·2e0a·2020·2020··user·space..···· | |||
| 000007d0:·2020·3c2f·7464·3e0a·2020·2020·3c2f·7472····</td>.····</tr | |||
| 00000 | 000006f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 000007f0:·203c·7464·3e52·313c·2f74·643e·0a20·2020···<td>R1</td>.··· | |||
| 00000800:·2020·203c·7464·3e45·6e73·7572·6520·534d·····<td>Ensure·SM | |||
| 00000810:·4550·2069·7320·6e6f·7420·6469·7361·626c··EP·is·not·disabl | |||
| 00000820:·6564·2064·7572·696e·6720·626f·6f74·3c2f··ed·during·boot</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 00000840:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 00000850:·2020·2020·2020·2020·5468·6520·534d·4550··········The·SMEP | |||
| 00000860:·2069·7320·7573·6564·2074·6f20·7072·6576···is·used·to·prev | |||
| 00000870:·656e·7420·7468·6520·7375·7065·7276·6973··ent·the·supervis | |||
| 00000880:·6f72·206d·6f64·6520·6672·6f6d·2065·7865··or·mode·from·exe | |||
| 00000890:·6375·7469·6e67·2075·7365·7220·7370·6163··cuting·user·spac | |||
| 000008a0:·6520·636f·6465·2c0a·6974·2069·7320·656e··e·code,.it·is·en | |||
| 000008b0:·6162·6c65·6420·6279·2064·6566·6175·6c74··abled·by·default | |||
| 000008c0:·2073·696e·6365·204c·696e·7578·206b·6572···since·Linux·ker | |||
| 000008d0:·6e65·6c20·332e·302e·2042·7574·2069·7420··nel·3.0.·But·it· | |||
| 000008e0:·636f·756c·6420·6265·2064·6973·6162·6c65··could·be·disable | |||
| 000008f0:·6420·7468·726f·7567·680a·6b65·726e·656c··d·through.kernel | |||
| 00000900:·2062·6f6f·7420·7061·7261·6d65·7465·7273···boot·parameters | |||
| 00000910:·2e0a·0a45·6e73·7572·6520·7468·6174·2053··...Ensure·that·S | |||
| 00000920:·7570·6572·7669·736f·7220·4d6f·6465·2045··upervisor·Mode·E | |||
| 00000930:·7865·6375·7469·6f6e·2050·7265·7665·6e74··xecution·Prevent | |||
| 00000940:·696f·6e20·2853·4d45·5029·2069·7320·6e6f··ion·(SMEP)·is·no | |||
| 00000950:·7420·6469·7361·626c·6564·2062·790a·7468··t·disabled·by.th | |||
| 00000960:·6520·3c74·743e·6e6f·736d·6570·3c2f·7474··e·<tt>nosmep</tt | |||
| 00000970:·3e20·626f·6f74·2070·6172·616d·656e·7465··>·boot·paramente | |||
| 00000980:·7220·6f70·7469·6f6e·2e0a·0a43·6865·636b··r·option...Check | |||
| 00000990:·2074·6861·7420·7468·6520·6c69·6e65·203c···that·the·line·< | |||
| 000009a0:·7072·653e·4752·5542·5f43·4d44·4c49·4e45··pre>GRUB_CMDLINE | |||
| 000009b0:·5f4c·494e·5558·3d22·2e2e·2e22·3c2f·7072··_LINUX="..."</pr | |||
| 000009c0:·653e·2077·6974·6869·6e20·3c74·743e·2f65··e>·within·<tt>/e | |||
| Max diff block lines reached; 3003141/3039181 bytes (98.81%) of diff not shown. | |||
| Offset 1, 29 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 20 | ······························mode·from·executing·user·space·code,·it·is | 4 | ······························mode·from·executing·user·space·code,·it·is |
| 21 | ······························enabled·by·default·since·Linux·kernel·3.0. | 5 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 22 | ······························But·it·could·be·disabled·through·kernel·boot | 6 | ······························But·it·could·be·disabled·through·kernel·boot |
| 23 | ······························parameters.·Ensure·that·Supervisor·Mode | 7 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 31, 21 lines modified | Offset 15, 14 lines modified | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 33 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 34 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 35 | ······························kernels: | 19 | ······························kernels: |
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 37 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 46 | ······························package·do·not·need·to·install·the·kernel- | 23 | ······························package·do·not·need·to·install·the·kernel- |
| 47 | ······························PAE·package·because·the·64-bit·x86·kernel | 24 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 48 | ······························already·includes·this·support.·However,·if | 25 | ······························already·includes·this·support.·However,·if |
| 49 | ······························the·system·is·32-bit·and·also·supports·the | 26 | ······························the·system·is·32-bit·and·also·supports·the |
| 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 39, 37 lines modified | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 68 | ···········································································validated. | 45 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 125 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 673476/691503 bytes (97.39%) of diff not shown. | |||
| Offset 40, 14 lines modified | Offset 40, 57 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td>Disable·SSH·Root·Login</td> | 91 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 50 | ········The·root·user·should·never·be·allowed·to·login·to·a | 93 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | 94 | system·directly·over·a·network. |
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 62, 31 lines modified | Offset 105, 51 lines modified | ||
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 107 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 108 | ······</td> |
| 66 | ····</tr> | 109 | ····</tr> |
| 67 | ····<tr> | 110 | ····<tr> |
| 68 | ······<td>3.1.1</td> | 111 | ······<td>3.1.1</td> |
| 69 | ······<td>Disable·GDM· | 112 | ······<td>Disable·GDM·Automatic·Login</td> |
| 70 | ······<td·xml:lang="en-US"> | 113 | ······<td·xml:lang="en-US"> |
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 76 | <pre>[daemon] | 119 | <pre>[daemon] |
| 77 | 120 | AutomaticLoginEnable=false</pre> | |
| 78 | ······</td> | 121 | ······</td> |
| 79 | ······<td·xml:lang="en-US"> | 122 | ······<td·xml:lang="en-US"> |
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 81 | system·security. | 124 | system·security. |
| 82 | ······</td> | 125 | ······</td> |
| 83 | ····</tr> | 126 | ····</tr> |
| 84 | ····<tr> | 127 | ····<tr> |
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 128 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 86 | ······<td>Verify·Only·Root·Has·UID·0</td> | 147 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 87 | ······<td·xml:lang="en-US"> | 148 | ······<td·xml:lang="en-US"> |
| 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 90 | their·UID·changed. | 151 | their·UID·changed. |
| 91 | <br·/> | 152 | <br·/> |
| 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 125, 77 lines modified | Offset 188, 14 lines modified | ||
| 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 127 | misconfiguration·elsewhere. | 190 | misconfiguration·elsewhere. |
| 128 | ······</td> | 191 | ······</td> |
| 129 | ····</tr> | 192 | ····</tr> |
| 130 | ····<tr> | 193 | ····<tr> |
| 131 | ······<td>3.1.1<br/>3.1.5</td> | 194 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 456734/464742 bytes (98.28%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 38 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·8 | 2 | Oracle·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································8's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 3 | ······························································································Even·though·the | 28 | ······························································································Even·though·the |
| 4 | ······························································································communications | 29 | ······························································································communications |
| 5 | ······························································································channel·may·be | 30 | ······························································································channel·may·be |
| 6 | ······························································································encrypted,·an | 31 | ······························································································encrypted,·an |
| 7 | ······························································································additional·layer·of | 32 | ······························································································additional·layer·of |
| 8 | ······························································································security·is·gained | 33 | ······························································································security·is·gained |
| 9 | ······························································································by·extending·the | 34 | ······························································································by·extending·the |
| Offset 22, 23 lines modified | Offset 47, 34 lines modified | ||
| 22 | ······························································································actions·performed·on | 47 | ······························································································actions·performed·on |
| 23 | ······························································································the·system·and·also | 48 | ······························································································the·system·and·also |
| 24 | ······························································································helps·to·minimize | 49 | ······························································································helps·to·minimize |
| 25 | ······························································································direct·attack | 50 | ······························································································direct·attack |
| 26 | ······························································································attempts·on·root's | 51 | ······························································································attempts·on·root's |
| 27 | ······························································································password. | 52 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ······································· | 54 | ·······································automatically·login·without·user·interaction·or |
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 58 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 34 | ······································· | 59 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 35 | ·······································etc/gdm/custom.conf.·For·example: | 60 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 36 | ·······································[daemon] | 61 | ·······································[daemon] |
| 37 | ······································· | 62 | ·······································AutomaticLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 38 | ······························································································An·account·has·root | 74 | ······························································································An·account·has·root |
| 39 | ······························································································authority·if·it·has | 75 | ······························································································authority·if·it·has |
| 40 | ······························································································a·UID·of·0.·Multiple | 76 | ······························································································a·UID·of·0.·Multiple |
| 41 | ······························································································accounts·with·a·UID | 77 | ······························································································accounts·with·a·UID |
| 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 61, 129 lines modified | Offset 97, 104 lines modified | ||
| 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 67 | ·······································passwords. | 103 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 76 | ······························································································ | 104 | ······························································································Preventing·direct |
| 77 | ······························································································o | 105 | ······························································································root·login·to·serial |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 78 | ······························································································ | 111 | ······························································································root·account. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 79 | ······························································································This·prevents | 122 | ······························································································This·prevents |
| 80 | ······························································································attackers·with | 123 | ······························································································attackers·with |
| 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 87 | ·······································emergency.service.·····································prevented·by | 130 | ·······································emergency.service.·····································prevented·by |
| 88 | ······························································································configuring·the | 131 | ······························································································configuring·the |
| 89 | ······························································································bootloader·password. | 132 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| Max diff block lines reached; 799107/817054 bytes (97.80%) of diff not shown. | |||
| Offset 4133, 15 lines modified | Offset 4133, 15 lines modified | ||
| 4133 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4133 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4134 | ··</td> | 4134 | ··</td> |
| 4135 | ··<td·xml:lang="en-US"> | 4135 | ··<td·xml:lang="en-US"> |
| 4136 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4136 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4137 | time-based·limit,·effects·of·potential·attacks·against | 4137 | time-based·limit,·effects·of·potential·attacks·against |
| 4138 | encryption·keys·are·limited. | 4138 | encryption·keys·are·limited. |
| 4139 | ··</td> | 4139 | ··</td> |
| 4140 | ··<td>var_rekey_limit_ | 4140 | ··<td>var_rekey_limit_time=1hour<br/>var_rekey_limit_size=1G</td> |
| 4141 | </tr> | 4141 | </tr> |
| 4142 | <tr> | 4142 | <tr> |
| 4143 | ··<td></td> | 4143 | ··<td></td> |
| 4144 | ··<td>N/A</td> | 4144 | ··<td>N/A</td> |
| 4145 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4145 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4146 | ··<td·xml:lang="en-US"> | 4146 | ··<td·xml:lang="en-US"> |
| 4147 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4147 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3401, 16 lines modified | Offset 3401, 16 lines modified | ||
| 3401 | ··················································································································generator·used·by | 3401 | ··················································································································generator·used·by |
| 3402 | ··················································································································SSH·would·be·known | 3402 | ··················································································································SSH·would·be·known |
| 3403 | ··················································································································to·potential | 3403 | ··················································································································to·potential |
| 3404 | ··················································································································attackers. | 3404 | ··················································································································attackers. |
| 3405 | ··················································································································By·decreasing·the | 3405 | ··················································································································By·decreasing·the |
| 3406 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3406 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3407 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3407 | ········Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3408 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3408 | ·····N/·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_time=1hour |
| 3409 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3409 | ·····A··renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_size=1G |
| 3410 | ·························RekeyLimit·1G·1hour······································································potential·attacks | 3410 | ·························RekeyLimit·1G·1hour······································································potential·attacks |
| 3411 | ··················································································································against·encryption | 3411 | ··················································································································against·encryption |
| 3412 | ··················································································································keys·are·limited. | 3412 | ··················································································································keys·are·limited. |
| 3413 | ··················································································································SSH·implementation | 3413 | ··················································································································SSH·implementation |
| 3414 | ··················································································································in·Oracle·Linux·8 | 3414 | ··················································································································in·Oracle·Linux·8 |
| 3415 | ··················································································································uses·the·openssl | 3415 | ··················································································································uses·the·openssl |
| 3416 | ··················································································································library,·which | 3416 | ··················································································································library,·which |
| Offset 63, 14949 lines modified | Offset 63, 14949 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (977 lines added, 977 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·2 | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | ||
| 00000470:·7 | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:· | 00000480:·2020·2020·2020·3c74·643e·456e·7375·7265········<td>Ensure | ||
| 00000490:· | 00000490:·2061·7564·6974·6420·436f·6c6c·6563·7473···auditd·Collects | ||
| 000004a0:·20 | 000004a0:·2049·6e66·6f72·6d61·7469·6f6e·206f·6e20···Information·on· | ||
| 000004b0:· | 000004b0:·7468·6520·5573·6520·6f66·2050·7269·7669··the·Use·of·Privi | ||
| 000004c0:· | 000004c0:·6c65·6765·6420·436f·6d6d·616e·6473·202d··leged·Commands·- | ||
| 000004d0:· | 000004d0:·2073·7368·2d6b·6579·7369·676e·3c2f·7464···ssh-keysign</td | ||
| 000004e0:· | 000004e0:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 000004f0:·6 | 000004f0:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000500:· | 00000500:·2020·2020·2020·4174·2061·206d·696e·696d········At·a·minim | ||
| 00000510:· | 00000510:·756d·2c20·7468·6520·6175·6469·7420·7379··um,·the·audit·sy | ||
| 00000520:· | 00000520:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000530:· | 00000530:·6563·7420·7468·6520·6578·6563·7574·696f··ect·the·executio | ||
| 00000540:·6 | 00000540:·6e20·6f66·0a70·7269·7669·6c65·6765·6420··n·of.privileged· | ||
| 00000550:·6 | 00000550:·636f·6d6d·616e·6473·2066·6f72·2061·6c6c··commands·for·all | ||
| 00000560:·2 | 00000560:·2075·7365·7273·2061·6e64·2072·6f6f·742e···users·and·root. | ||
| 00000570:· | 00000570:·2049·6620·7468·6520·3c74·743e·6175·6469···If·the·<tt>audi | ||
| 00000580:· | 00000580:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000590:· | 00000590:·730a·636f·6e66·6967·7572·6564·2074·6f20··s.configured·to· | ||
| 000005a0:· | 000005a0:·7573·6520·7468·6520·3c74·743e·6175·6765··use·the·<tt>auge | ||
| 000005b0:·6e | 000005b0:·6e72·756c·6573·3c2f·7474·3e20·7072·6f67··nrules</tt>·prog | ||
| 000005c0:· | 000005c0:·7261·6d20·746f·2072·6561·6420·6175·6469··ram·to·read·audi | ||
| 000005d0:· | 000005d0:·7420·7275·6c65·7320·6475·7269·6e67·0a64··t·rules·during.d | ||
| 000005e0:· | 000005e0:·6165·6d6f·6e20·7374·6172·7475·7020·2874··aemon·startup·(t | ||
| 000005f0:· | 000005f0:·6865·2064·6566·6175·6c74·292c·2061·6464··he·default),·add | ||
| 00000600:· | 00000600:·2061·206c·696e·6520·6f66·2074·6865·2066···a·line·of·the·f | ||
| 00000610:·6 | 00000610:·6f6c·6c6f·7769·6e67·2066·6f72·6d20·746f··ollowing·form·to | ||
| 00000620:· | 00000620:·2061·2066·696c·6520·7769·7468·0a73·7566···a·file·with.suf | ||
| 00000630:· | 00000630:·6669·7820·3c74·743e·2e72·756c·6573·3c2f··fix·<tt>.rules</ | ||
| 00000640:· | 00000640:·7474·3e20·696e·2074·6865·2064·6972·6563··tt>·in·the·direc | ||
| 00000650:· | 00000650:·746f·7279·203c·7474·3e2f·6574·632f·6175··tory·<tt>/etc/au | ||
| 00000660:· | 00000660:·6469·742f·7275·6c65·732e·643c·2f74·743e··dit/rules.d</tt> | ||
| 00000670:·3 | 00000670:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 00000680:· | 00000680:·2c65·7869·7420·2d46·2070·6174·683d·2f75··,exit·-F·path=/u | ||
| 00000690:· | 00000690:·7372·2f6c·6962·6578·6563·2f6f·7065·6e73··sr/libexec/opens | ||
| 000006a0:·73 | 000006a0:·7368·2f73·7368·2d6b·6579·7369·676e·202d··sh/ssh-keysign·- | ||
| 000006b0:· | 000006b0:·4620·7065·726d·3d78·202d·4620·6175·6964··F·perm=x·-F·auid | ||
| 000006c0:· | 000006c0:·2667·743b·3d31·3030·3020·2d46·2061·7569··>=1000·-F·aui | ||
| 000006d0:·6 | 000006d0:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 000006e0:· | 000006e0:·7072·6976·696c·6567·6564·3c2f·7072·653e··privileged</pre> | ||
| 000006f0:· | 000006f0:·0a49·6620·7468·6520·3c74·743e·6175·6469··.If·the·<tt>audi | ||
| 00000700:·74 | 00000700:·7464·3c2f·7474·3e20·6461·656d·6f6e·2069··td</tt>·daemon·i | ||
| 00000710:·73 | 00000710:·7320·636f·6e66·6967·7572·6564·2074·6f20··s·configured·to· | ||
| 00000720:· | 00000720:·7573·6520·7468·6520·3c74·743e·6175·6469··use·the·<tt>audi | ||
| 00000730:·74 | 00000730:·7463·746c·3c2f·7474·3e0a·7574·696c·6974··tctl</tt>.utilit | ||
| 00000740:· | 00000740:·7920·746f·2072·6561·6420·6175·6469·7420··y·to·read·audit· | ||
| 00000750:· | 00000750:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 00000760:· | 00000760:·6d6f·6e20·7374·6172·7475·702c·2061·6464··mon·startup,·add | ||
| 00000770:· | 00000770:·2061·206c·696e·6520·6f66·2074·6865·2066···a·line·of·the·f | ||
| 00000780:· | 00000780:·6f6c·6c6f·7769·6e67·0a66·6f72·6d20·746f··ollowing.form·to | ||
| 00000790:· | 00000790:·203c·7474·3e2f·6574·632f·6175·6469·742f···<tt>/etc/audit/ | ||
| 000007a0:· | 000007a0:·6175·6469·742e·7275·6c65·733c·2f74·743e··audit.rules</tt> | ||
| 000007b0:· | 000007b0:·3a0a·3c70·7265·3e2d·6120·616c·7761·7973··:.<pre>-a·always | ||
| 000007c0:· | 000007c0:·2c65·7869·7420·2d46·2070·6174·683d·2f75··,exit·-F·path=/u | ||
| 000007d0:·7 | 000007d0:·7372·2f6c·6962·6578·6563·2f6f·7065·6e73··sr/libexec/opens | ||
| 000007e0:· | 000007e0:·7368·2f73·7368·2d6b·6579·7369·676e·202d··sh/ssh-keysign·- | ||
| 000007f0:· | 000007f0:·4620·7065·726d·3d78·202d·4620·6175·6964··F·perm=x·-F·auid | ||
| 00000800:· | 00000800:·2667·743b·3d31·3030·3020·2d46·2061·7569··>=1000·-F·aui | ||
| 00000810:· | 00000810:·6421·3d75·6e73·6574·202d·4620·6b65·793d··d!=unset·-F·key= | ||
| 00000820:· | 00000820:·7072·6976·696c·6567·6564·3c2f·7072·653e··privileged</pre> | ||
| 00000830:· | 00000830:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00000840:· | 00000840:·2020·203c·7464·2078·6d6c·3a6c·616e·673d·····<td·xml:lang= | ||
| 00000850:·2 | 00000850:·2265·6e2d·5553·223e·0a20·2020·2020·2020··"en-US">.······· | ||
| 00000860:· | 00000860:·204d·6973·7573·6520·6f66·2070·7269·7669···Misuse·of·privi | ||
| 00000870:·6 | 00000870:·6c65·6765·6420·6675·6e63·7469·6f6e·732c··leged·functions, | ||
| 00000880:· | 00000880:·2065·6974·6865·7220·696e·7465·6e74·696f···either·intentio | ||
| 00000890:· | 00000890:·6e61·6c6c·7920·6f72·2075·6e69·6e74·656e··nally·or·uninten | ||
| 000008a0:· | 000008a0:·7469·6f6e·616c·6c79·2062·790a·6175·7468··tionally·by.auth | ||
| 000008b0:·6f7 | 000008b0:·6f72·697a·6564·2075·7365·7273·2c20·6f72··orized·users,·or | ||
| 000008c0:· | 000008c0:·2062·7920·756e·6175·7468·6f72·697a·6564···by·unauthorized | ||
| 000008d0:· | 000008d0:·2065·7874·6572·6e61·6c20·656e·7469·7469···external·entiti | ||
| 000008e0:· | 000008e0:·6573·2074·6861·7420·6861·7665·2063·6f6d··es·that·have·com | ||
| 000008f0:· | 000008f0:·7072·6f6d·6973·6564·2073·7973·7465·6d20··promised·system· | ||
| 00000900:·6 | 00000900:·6163·636f·756e·7473·2c0a·6973·2061·2073··accounts,.is·a·s | ||
| 00000910:· | 00000910:·6572·696f·7573·2061·6e64·206f·6e67·6f69··erious·and·ongoi | ||
| 00000920:· | 00000920:·6e67·2063·6f6e·6365·726e·2061·6e64·2063··ng·concern·and·c | ||
| 00000930:· | 00000930:·616e·2068·6176·6520·7369·676e·6966·6963··an·have·signific | ||
| 00000940:· | 00000940:·616e·7420·6164·7665·7273·6520·696d·7061··ant·adverse·impa | ||
| 00000950:· | 00000950:·6374·7320·6f6e·206f·7267·616e·697a·6174··cts·on·organizat | ||
| 00000960:· | 00000960:·696f·6e73·2e0a·4175·6469·7469·6e67·2074··ions..Auditing·t | ||
| 00000970:·6 | 00000970:·6865·2075·7365·206f·6620·7072·6976·696c··he·use·of·privil | ||
| 00000980:·657 | 00000980:·6567·6564·2066·756e·6374·696f·6e73·2069··eged·functions·i | ||
| 00000990:·7320·6f6 | 00000990:·7320·6f6e·6520·7761·7920·746f·2064·6574··s·one·way·to·det | ||
| 000009a0:· | 000009a0:·6563·7420·7375·6368·206d·6973·7573·6520··ect·such·misuse· | ||
| 000009b0:·6 | 000009b0:·616e·6420·6964·656e·7469·6679·0a74·6865··and·identify.the | ||
| 000009c0:· | 000009c0:·2072·6973·6b20·6672·6f6d·2069·6e73·6964···risk·from·insid | ||
| 000009d0:·6 | 000009d0:·6572·2061·6e64·2061·6476·616e·6365·6420··er·and·advanced· | ||
| 000009e0:·7 | 000009e0:·7065·7273·6973·7465·6e74·2074·6872·6561··persistent·threa | ||
| 000009f0:·7 | 000009f0:·7473·2e0a·3c62·7220·2f3e·3c62·7220·2f3e··ts..<br·/><br·/> | ||
| 00000a00:· | 00000a00:·0a50·7269·7669·6c65·6765·6420·7072·6f67··.Privileged·prog | ||
| 00000a10:· | 00000a10:·7261·6d73·2061·7265·2073·7562·6a65·6374··rams·are·subject | ||
| 00000a20:·20 | 00000a20:·2074·6f20·6573·6361·6c61·7469·6f6e·2d6f···to·escalation-o | ||
| 00000a30:· | 00000a30:·662d·7072·6976·696c·6567·6520·6174·7461··f-privilege·atta | ||
| 00000a40:· | 00000a40:·636b·732c·0a77·6869·6368·2061·7474·656d··cks,.which·attem | ||
| 00000a50:· | 00000a50:·7074·2074·6f20·7375·6276·6572·7420·7468··pt·to·subvert·th | ||
| 00000a60:· | 00000a60:·6569·7220·6e6f·726d·616c·2072·6f6c·6520··eir·normal·role· | ||
| 00000a70:· | 00000a70:·6f66·2070·726f·7669·6469·6e67·2073·6f6d··of·providing·som | ||
| 00000a80:· | 00000a80:·6520·6e65·6365·7373·6172·7920·6275·740a··e·necessary·but. | ||
| 00000a90:·6 | 00000a90:·6c69·6d69·7465·6420·6361·7061·6269·6c69··limited·capabili | ||
| 00000aa0:· | 00000aa0:·7479·2e20·4173·2073·7563·682c·206d·6f74··ty.·As·such,·mot | ||
| 00000ab0:· | 00000ab0:·6976·6174·696f·6e20·6578·6973·7473·2074··ivation·exists·t | ||
| 00000ac0:· | 00000ac0:·6f20·6d6f·6e69·746f·7220·7468·6573·6520··o·monitor·these· | ||
| 00000ad0:· | 00000ad0:·7072·6f67·7261·6d73·2066·6f72·0a75·6e75··programs·for.unu | ||
| 00000ae0:·7 | 00000ae0:·7375·616c·2061·6374·6976·6974·792e·0a20··sual·activity..· | ||
| 00000af0:· | 00000af0:·2020·2020·203c·2f74·643e·0a20·2020·203c·······</td>.····< | ||
| 00000b00:·7 | 00000b00:·2f74·723e·0a20·2020·203c·7472·3e0a·2020··/tr>.····<tr>.·· | ||
| 00000b10:· | 00000b10:·2020·2020·3c74·643e·4155·2d32·2864·293c······<td>AU-2(d)< | ||
| 00000b20:· | 00000b20:·6272·2f3e·4155·2d31·3228·6329·3c62·722f··br/>AU-12(c)<br/ | ||
| 00000b30:· | 00000b30:·3e43·4d2d·3628·6129·3c2f·7464·3e0a·2020··>CM-6(a)</td>.·· | ||
| 00000b40:·202 | 00000b40:·2020·2020·3c74·643e·5265·636f·7264·2045······<td>Record·E | ||
| 00000b50:· | 00000b50:·7665·6e74·7320·7468·6174·204d·6f64·6966··vents·that·Modif | ||
| 00000b60:·7 | 00000b60:·7920·7468·6520·5379·7374·656d·2773·2044··y·the·System's·D | ||
| 00000b70:· | 00000b70:·6973·6372·6574·696f·6e61·7279·2041·6363··iscretionary·Acc | ||
| 00000b80:· | 00000b80:·6573·7320·436f·6e74·726f·6c73·202d·206c··ess·Controls·-·l | ||
| 00000b90:·3 | 00000b90:·7365·7478·6174·7472·3c2f·7464·3e0a·2020··setxattr</td>.·· | ||
| 00000ba0:· | 00000ba0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 00000bb0:· | 00000bb0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| Max diff block lines reached; 7288087/7423491 bytes (98.18%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 24 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 174 | ······</td> | 176 | ······</td> |
| 175 | ····</tr> | 177 | ····</tr> |
| 176 | ····<tr> | 178 | ····<tr> |
| 177 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 179 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 187, 26 lines modified | Offset 189, 24 lines modified | ||
| 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 189 | enables·the·system·to·continue·servicing·valid·connection·requests. | 191 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 190 | ······</td> | 192 | ······</td> |
| 191 | ····</tr> | 193 | ····</tr> |
| 192 | ····<tr> | 194 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 195 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 196 | ······<td>Install·iptables·Package</td> |
| 195 | ······<td·xml:lang="en-US"> | 197 | ······<td·xml:lang="en-US"> |
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | netwo | 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 199 | ······</td> | 201 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 202 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 23 lines modified | Offset 246, 40 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 294342/300185 bytes (98.05%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 23 lines modified | Offset 112, 31 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 119 | ···················································································· | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 120 | ···················································································· | 125 | ····················································································system.·The |
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 121 | ····················································································network· | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································s | 132 | ····················································································should·ignore |
| 126 | ····················································································an | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | ||
| 127 | ···················································································· | 135 | ····················································································spoofing·measure. |
| 128 | ····················································································A·TCP·SYN·flood | 136 | ····················································································A·TCP·SYN·flood |
| 129 | ····················································································attack·can·cause·a | 137 | ····················································································attack·can·cause·a |
| 130 | ····················································································denial·of·service | 138 | ····················································································denial·of·service |
| 131 | ····················································································by·filling·a | 139 | ····················································································by·filling·a |
| 132 | ····················································································system's·TCP | 140 | ····················································································system's·TCP |
| 133 | ····················································································connection·table | 141 | ····················································································connection·table |
| 134 | ····················································································with·connections·in | 142 | ····················································································with·connections·in |
| Offset 147, 31 lines modified | Offset 155, 23 lines modified | ||
| 147 | ····················································································flood·condition·is | 155 | ····················································································flood·condition·is |
| 148 | ····················································································detected,·and | 156 | ····················································································detected,·and |
| 149 | ····················································································enables·the·system | 157 | ····················································································enables·the·system |
| 150 | ····················································································to·continue | 158 | ····················································································to·continue |
| 151 | ····················································································servicing·valid | 159 | ····················································································servicing·valid |
| 152 | ····················································································connection | 160 | ····················································································connection |
| 153 | ····················································································requests. | 161 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································p | 162 | ····················································································iptables·controls |
| 157 | ···················································································· | 163 | ····················································································the·Linux·kernel |
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·packet |
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 165 | ····················································································s | 168 | ····················································································set·up·firewalls |
| 166 | ····················································································other·interfaces | ||
| 167 | ···················································································· | 169 | ····················································································and·IP |
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ····················································································s | 170 | ····················································································masquerading,·etc. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 24 lines modified | Offset 187, 54 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 481787/495374 bytes (97.26%) of diff not shown. | |||
| Offset 65, 14854 lines modified | Offset 65, 14854 lines modified | ||
| 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | ||
| 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | ||
| 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | ||
| 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | Diff chunk too large, falling back to line-by-line diff (4062 lines added, 4062 lines removed) | |
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·286 | 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000480:· | 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | ||
| 00000490:· | 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | ||
| 000004a0:· | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 000004b0:· | 000004b0:·456e·7375·7265·2061·7564·6974·6420·436f··Ensure·auditd·Co | ||
| 000004c0:· | 000004c0:·6c6c·6563·7473·2049·6e66·6f72·6d61·7469··llects·Informati | ||
| 000004d0:·6 | 000004d0:·6f6e·206f·6e20·7468·6520·5573·6520·6f66··on·on·the·Use·of | ||
| 000004e0:· | 000004e0:·2050·7269·7669·6c65·6765·6420·436f·6d6d···Privileged·Comm | ||
| 000004f0:· | 000004f0:·616e·6473·202d·2073·7368·2d6b·6579·7369··ands·-·ssh-keysi | ||
| 00000500:·6 | 00000500:·676e·3c2f·7464·3e0a·2020·2020·2020·3c74··gn</td>.······<t | ||
| 00000510:·6 | 00000510:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | ||
| 00000520:· | 00000520:·5322·3e0a·2020·2020·2020·2020·4174·2061··S">.········At·a | ||
| 00000530:· | 00000530:·206d·696e·696d·756d·2c20·7468·6520·6175···minimum,·the·au | ||
| 00000540:·6469·74 | 00000540:·6469·7420·7379·7374·656d·2073·686f·756c··dit·system·shoul | ||
| 00000550:·6 | 00000550:·6420·636f·6c6c·6563·7420·7468·6520·6578··d·collect·the·ex | ||
| 00000560:·6 | 00000560:·6563·7574·696f·6e20·6f66·0a70·7269·7669··ecution·of.privi | ||
| 00000570:·6 | 00000570:·6c65·6765·6420·636f·6d6d·616e·6473·2066··leged·commands·f | ||
| 00000580:· | 00000580:·6f72·2061·6c6c·2075·7365·7273·2061·6e64··or·all·users·and | ||
| 00000590:· | 00000590:·2072·6f6f·742e·2049·6620·7468·6520·3c74···root.·If·the·<t | ||
| 000005a0:· | 000005a0:·743e·6175·6469·7464·3c2f·7474·3e20·6461··t>auditd</tt>·da | ||
| 000005b0:·65 | 000005b0:·656d·6f6e·2069·730a·636f·6e66·6967·7572··emon·is.configur | ||
| 000005c0:· | 000005c0:·6564·2074·6f20·7573·6520·7468·6520·3c74··ed·to·use·the·<t | ||
| 000005d0:· | 000005d0:·743e·6175·6765·6e72·756c·6573·3c2f·7474··t>augenrules</tt | ||
| 000005e0:· | 000005e0:·3e20·7072·6f67·7261·6d20·746f·2072·6561··>·program·to·rea | ||
| 000005f0:· | 000005f0:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 00000600:· | 00000600:·7269·6e67·0a64·6165·6d6f·6e20·7374·6172··ring.daemon·star | ||
| 00000610:· | 00000610:·7475·7020·2874·6865·2064·6566·6175·6c74··tup·(the·default | ||
| 00000620:· | 00000620:·292c·2061·6464·2061·206c·696e·6520·6f66··),·add·a·line·of | ||
| 00000630:· | 00000630:·2074·6865·2066·6f6c·6c6f·7769·6e67·2066···the·following·f | ||
| 00000640:· | 00000640:·6f72·6d20·746f·2061·2066·696c·6520·7769··orm·to·a·file·wi | ||
| 00000650:· | 00000650:·7468·0a73·7566·6669·7820·3c74·743e·2e72··th.suffix·<tt>.r | ||
| 00000660:· | 00000660:·756c·6573·3c2f·7474·3e20·696e·2074·6865··ules</tt>·in·the | ||
| 00000670:· | 00000670:·2064·6972·6563·746f·7279·203c·7474·3e2f···directory·<tt>/ | ||
| 00000680:·6 | 00000680:·6574·632f·6175·6469·742f·7275·6c65·732e··etc/audit/rules. | ||
| 00000690:· | 00000690:·643c·2f74·743e·3a0a·3c70·7265·3e2d·6120··d</tt>:.<pre>-a· | ||
| 000006a0:·6 | 000006a0:·616c·7761·7973·2c65·7869·7420·2d46·2070··always,exit·-F·p | ||
| 000006b0:· | 000006b0:·6174·683d·2f75·7372·2f6c·6962·6578·6563··ath=/usr/libexec | ||
| 000006c0:·2 | 000006c0:·2f6f·7065·6e73·7368·2f73·7368·2d6b·6579··/openssh/ssh-key | ||
| 000006d0:· | 000006d0:·7369·676e·202d·4620·6175·6964·2667·743b··sign·-F·auid> | ||
| 000006e0:· | 000006e0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000006f0:·6 | 000006f0:·6e73·6574·202d·4620·6b65·793d·7072·6976··nset·-F·key=priv | ||
| 00000700:· | 00000700:·696c·6567·6564·3c2f·7072·653e·0a49·6620··ileged</pre>.If· | ||
| 00000710:· | 00000710:·7468·6520·3c74·743e·6175·6469·7464·3c2f··the·<tt>auditd</ | ||
| 00000720:· | 00000720:·7474·3e20·6461·656d·6f6e·2069·7320·636f··tt>·daemon·is·co | ||
| 00000730:·6e | 00000730:·6e66·6967·7572·6564·2074·6f20·7573·6520··nfigured·to·use· | ||
| 00000740:·7 | 00000740:·7468·6520·3c74·743e·6175·6469·7463·746c··the·<tt>auditctl | ||
| 00000750:· | 00000750:·3c2f·7474·3e0a·7574·696c·6974·7920·746f··</tt>.utility·to | ||
| 00000760:· | 00000760:·2072·6561·6420·6175·6469·7420·7275·6c65···read·audit·rule | ||
| 00000770:· | 00000770:·7320·6475·7269·6e67·2064·6165·6d6f·6e20··s·during·daemon· | ||
| 00000780:· | 00000780:·7374·6172·7475·702c·2061·6464·2061·206c··startup,·add·a·l | ||
| 00000790:· | 00000790:·696e·6520·6f66·2074·6865·2066·6f6c·6c6f··ine·of·the·follo | ||
| 000007a0:· | 000007a0:·7769·6e67·0a66·6f72·6d20·746f·203c·7474··wing.form·to·<tt | ||
| 000007b0:· | 000007b0:·3e2f·6574·632f·6175·6469·742f·6175·6469··>/etc/audit/audi | ||
| 000007c0:· | 000007c0:·742e·7275·6c65·733c·2f74·743e·3a0a·3c70··t.rules</tt>:.<p | ||
| 000007d0:· | 000007d0:·7265·3e2d·6120·616c·7761·7973·2c65·7869··re>-a·always,exi | ||
| 000007e0:· | 000007e0:·7420·2d46·2070·6174·683d·2f75·7372·2f6c··t·-F·path=/usr/l | ||
| 000007f0:·6 | 000007f0:·6962·6578·6563·2f6f·7065·6e73·7368·2f73··ibexec/openssh/s | ||
| 00000800:· | 00000800:·7368·2d6b·6579·7369·676e·202d·4620·6175··sh-keysign·-F·au | ||
| 00000810:· | 00000810:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000820:·6 | 00000820:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 00000830:· | 00000830:·793d·7072·6976·696c·6567·6564·3c2f·7072··y=privileged</pr | ||
| 00000840:· | 00000840:·653e·0a20·2020·2020·203c·2f74·643e·0a20··e>.······</td>.· | ||
| 00000850:· | 00000850:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000860:·6 | 00000860:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000870:· | 00000870:·2020·204d·6973·7573·6520·6f66·2070·7269·····Misuse·of·pri | ||
| 00000880:· | 00000880:·7669·6c65·6765·6420·6675·6e63·7469·6f6e··vileged·function | ||
| 00000890:· | 00000890:·732c·2065·6974·6865·7220·696e·7465·6e74··s,·either·intent | ||
| 000008a0:·696 | 000008a0:·696f·6e61·6c6c·7920·6f72·2075·6e69·6e74··ionally·or·unint | ||
| 000008b0:·6 | 000008b0:·656e·7469·6f6e·616c·6c79·2062·790a·6175··entionally·by.au | ||
| 000008c0:· | 000008c0:·7468·6f72·697a·6564·2075·7365·7273·2c20··thorized·users,· | ||
| 000008d0:· | 000008d0:·6f72·2062·7920·756e·6175·7468·6f72·697a··or·by·unauthoriz | ||
| 000008e0:· | 000008e0:·6564·2065·7874·6572·6e61·6c20·656e·7469··ed·external·enti | ||
| 000008f0:· | 000008f0:·7469·6573·2074·6861·7420·6861·7665·2063··ties·that·have·c | ||
| 00000900:·6 | 00000900:·6f6d·7072·6f6d·6973·6564·2073·7973·7465··ompromised·syste | ||
| 00000910:· | 00000910:·6d20·6163·636f·756e·7473·2c0a·6973·2061··m·accounts,.is·a | ||
| 00000920:· | 00000920:·2073·6572·696f·7573·2061·6e64·206f·6e67···serious·and·ong | ||
| 00000930:·6 | 00000930:·6f69·6e67·2063·6f6e·6365·726e·2061·6e64··oing·concern·and | ||
| 00000940:·20 | 00000940:·2063·616e·2068·6176·6520·7369·676e·6966···can·have·signif | ||
| 00000950:·6 | 00000950:·6963·616e·7420·6164·7665·7273·6520·696d··icant·adverse·im | ||
| 00000960:· | 00000960:·7061·6374·7320·6f6e·206f·7267·616e·697a··pacts·on·organiz | ||
| 00000970:· | 00000970:·6174·696f·6e73·2e0a·4175·6469·7469·6e67··ations..Auditing | ||
| 00000980:· | 00000980:·2074·6865·2075·7365·206f·6620·7072·6976···the·use·of·priv | ||
| 00000990:· | 00000990:·696c·6567·6564·2066·756e·6374·696f·6e73··ileged·functions | ||
| 000009a0:· | 000009a0:·2069·7320·6f6e·6520·7761·7920·746f·2064···is·one·way·to·d | ||
| 000009b0:·65 | 000009b0:·6574·6563·7420·7375·6368·206d·6973·7573··etect·such·misus | ||
| 000009c0:·6 | 000009c0:·6520·616e·6420·6964·656e·7469·6679·0a74··e·and·identify.t | ||
| 000009d0:· | 000009d0:·6865·2072·6973·6b20·6672·6f6d·2069·6e73··he·risk·from·ins | ||
| 000009e0:·6 | 000009e0:·6964·6572·2061·6e64·2061·6476·616e·6365··ider·and·advance | ||
| 000009f0:· | 000009f0:·6420·7065·7273·6973·7465·6e74·2074·6872··d·persistent·thr | ||
| 00000a00:·6 | 00000a00:·6561·7473·2e0a·3c62·7220·2f3e·3c62·7220··eats..<br·/><br· | ||
| 00000a10:· | 00000a10:·2f3e·0a50·7269·7669·6c65·6765·6420·7072··/>.Privileged·pr | ||
| 00000a20:· | 00000a20:·6f67·7261·6d73·2061·7265·2073·7562·6a65··ograms·are·subje | ||
| 00000a30:· | 00000a30:·6374·2074·6f20·6573·6361·6c61·7469·6f6e··ct·to·escalation | ||
| 00000a40:· | 00000a40:·2d6f·662d·7072·6976·696c·6567·6520·6174··-of-privilege·at | ||
| 00000a50:· | 00000a50:·7461·636b·732c·0a77·6869·6368·2061·7474··tacks,.which·att | ||
| 00000a60:· | 00000a60:·656d·7074·2074·6f20·7375·6276·6572·7420··empt·to·subvert· | ||
| 00000a70:· | 00000a70:·7468·6569·7220·6e6f·726d·616c·2072·6f6c··their·normal·rol | ||
| 00000a80:·6 | 00000a80:·6520·6f66·2070·726f·7669·6469·6e67·2073··e·of·providing·s | ||
| 00000a90:·6 | 00000a90:·6f6d·6520·6e65·6365·7373·6172·7920·6275··ome·necessary·bu | ||
| 00000aa0:· | 00000aa0:·740a·6c69·6d69·7465·6420·6361·7061·6269··t.limited·capabi | ||
| 00000ab0:· | 00000ab0:·6c69·7479·2e20·4173·2073·7563·682c·206d··lity.·As·such,·m | ||
| 00000ac0:· | 00000ac0:·6f74·6976·6174·696f·6e20·6578·6973·7473··otivation·exists | ||
| 00000ad0:· | 00000ad0:·2074·6f20·6d6f·6e69·746f·7220·7468·6573···to·monitor·thes | ||
| 00000ae0:·6 | 00000ae0:·6520·7072·6f67·7261·6d73·2066·6f72·0a75··e·programs·for.u | ||
| 00000af0:·6 | 00000af0:·6e75·7375·616c·2061·6374·6976·6974·792e··nusual·activity. | ||
| 00000b00:· | 00000b00:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00000b10:· | 00000b10:·203c·2f74·723e·0a20·2020·203c·7472·3e0a···</tr>.····<tr>. | ||
| 00000b20:· | 00000b20:·2020·2020·2020·3c74·643e·4155·2d32·2864········<td>AU-2(d | ||
| 00000b30:· | 00000b30:·293c·6272·2f3e·4155·2d31·3228·6329·3c62··)<br/>AU-12(c)<b | ||
| 00000b40:·7 | 00000b40:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000b50:· | 00000b50:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000b60:· | 00000b60:·2045·7665·6e74·7320·7468·6174·204d·6f64···Events·that·Mod | ||
| 00000b70:·6 | 00000b70:·6966·7920·7468·6520·5379·7374·656d·2773··ify·the·System's | ||
| 00000b80:· | 00000b80:·2044·6973·6372·6574·696f·6e61·7279·2041···Discretionary·A | ||
| 00000b90:·6 | 00000b90:·6363·6573·7320·436f·6e74·726f·6c73·202d··ccess·Controls·- | ||
| 00000ba0:· | 00000ba0:·206c·7365·7478·6174·7472·3c2f·7464·3e0a···lsetxattr</td>. | ||
| 00000bb0:· | 00000bb0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 00000bc0:· | 00000bc0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 00000bd0:·202 | 00000bd0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| Max diff block lines reached; 7280637/7841771 bytes (92.84%) of diff not shown. | |||
| Offset 65, 273 lines modified | Offset 65, 273 lines modified | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | ||
| 00000470:·7265·2053·4d4 | 00000470:·7265·2053·4d45·5020·6973·206e·6f74·2064··re·SMEP·is·not·d | ||
| 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | ||
| 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | ||
| 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 000004c0:·2053·4d4 | 000004c0:·2053·4d45·5020·6973·2075·7365·6420·746f···SMEP·is·used·to | ||
| 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | ||
| 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | ||
| 000004f0:·6d20·6578·6563·7574·696e·6720·7573·6572··m·executing·user | |||
| 00000500:·2073·7061·6365·2063·6f64·652c·0a69·7420···space·code,.it· | |||
| 00000510:·6973·2065·6e61·626c·6564·2062·7920·6465··is·enabled·by·de | |||
| 00000520:·6661·756c·7420·7369·6e63·6520·4c69·6e75··fault·since·Linu | |||
| 00000530:·7820·6b65·726e·656c·2033·2e30·2e20·4275··x·kernel·3.0.·Bu | |||
| 00000540:·7420·6974·2063·6f75·6c64·2062·6520·6469··t·it·could·be·di | |||
| 00000550:·7361·626c·6564·2074·6872·6f75·6768·0a6b··sabled·through.k | |||
| 00000560:·6572·6e65·6c20·626f·6f74·2070·6172·616d··ernel·boot·param | |||
| 00000570:·6574·6572·732e·0a0a·456e·7375·7265·2074··eters...Ensure·t | |||
| 00000580:·6861·7420·5375·7065·7276·6973·6f72·204d··hat·Supervisor·M | |||
| 00000590:·6f64·6520·4578·6563·7574·696f·6e20·5072··ode·Execution·Pr | |||
| 000005a0:·6576·656e·7469·6f6e·2028·534d·4550·2920··evention·(SMEP)· | |||
| 000005b0:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 000005c0:·6279·0a74·6865·203c·7474·3e6e·6f73·6d65··by.the·<tt>nosme | |||
| 000005d0:·703c·2f74·743e·2062·6f6f·7420·7061·7261··p</tt>·boot·para | |||
| 000005e0:·6d65·6e74·6572·206f·7074·696f·6e2e·0a0a··menter·option... | |||
| 000005f0:·4368·6563·6b20·7468·6174·2074·6865·206c··Check·that·the·l | |||
| 00000600:·696e·6520·3c70·7265·3e47·5255·425f·434d··ine·<pre>GRUB_CM | |||
| 00000610:·444c·494e·455f·4c49·4e55·583d·222e·2e2e··DLINE_LINUX="... | |||
| 00000620:·223c·2f70·7265·3e20·7769·7468·696e·203c··"</pre>·within·< | |||
| 00000630:·7474·3e2f·6574·632f·6465·6661·756c·742f··tt>/etc/default/ | |||
| 00000640:·6772·7562·3c2f·7474·3e0a·646f·6573·6e27··grub</tt>.doesn' | |||
| 00000650:·7420·636f·6e74·6169·6e20·7468·6520·6172··t·contain·the·ar | |||
| 00000660:·6775·6d65·6e74·203c·7474·3e6e·6f73·6d65··gument·<tt>nosme | |||
| 00000670:·703c·2f74·743e·2e0a·5275·6e20·7468·6520··p</tt>..Run·the· | |||
| 00000680:·666f·6c6c·6f77·696e·6720·636f·6d6d·616e··following·comman | |||
| 00000690:·6420·746f·2075·7064·6174·6520·636f·6d6d··d·to·update·comm | |||
| 000006a0:·616e·6420·6c69·6e65·2066·6f72·2061·6c72··and·line·for·alr | |||
| 000006b0:·6561·6479·2069·6e73·7461·6c6c·6564·206b··eady·installed·k | |||
| 000006c0:·6572·6e65·6c73·3a0a·3c70·7265·3e23·2067··ernels:.<pre>#·g | |||
| 000006d0:·7275·6262·7920·2d2d·7570·6461·7465·2d6b··rubby·--update-k | |||
| 000006e0:·6572·6e65·6c3d·414c·4c20·2d2d·7265·6d6f··ernel=ALL·--remo | |||
| 000006f0:·7665·2d61·7267·733d·226e·6f73·6d65·7022··ve-args="nosmep" | |||
| 000004f0:·6d20·756e·696e·7465·6e74·696f·6e61·6c6c··m·unintentionall | |||
| 00000500:·7920·7265·6164·696e·672f·7772·6974·696e··y·reading/writin | |||
| 00000510:·6720·696e·746f·0a6d·656d·6f72·7920·7061··g·into.memory·pa | |||
| 00000520:·6765·7320·696e·2074·6865·2075·7365·7220··ges·in·the·user· | |||
| 00000530:·7370·6163·652c·2069·7420·6973·2065·6e61··space,·it·is·ena | |||
| 00000540:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000550:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000560:·656c·2033·2e37·2e0a·4275·7420·6974·2063··el·3.7..But·it·c | |||
| 00000570:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000580:·2074·6872·6f75·6768·206b·6572·6e65·6c20···through·kernel· | |||
| 00000590:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 000005a0:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 000005b0:·7065·7276·6973·6f72·204d·6f64·6520·4163··pervisor·Mode·Ac | |||
| 000005c0:·6365·7373·2050·7265·7665·6e74·696f·6e20··cess·Prevention· | |||
| 000005d0:·2853·4d41·5029·2069·7320·6e6f·7420·6469··(SMAP)·is·not·di | |||
| 000005e0:·7361·626c·6564·2062·790a·7468·6520·3c74··sabled·by.the·<t | |||
| 000005f0:·743e·6e6f·736d·6170·3c2f·7474·3e20·626f··t>nosmap</tt>·bo | |||
| 00000600:·6f74·2070·6172·616d·656e·7465·7220·6f70··ot·paramenter·op | |||
| 00000610:·7469·6f6e·2e0a·0a43·6865·636b·2074·6861··tion...Check·tha | |||
| 00000620:·7420·7468·6520·6c69·6e65·203c·7072·653e··t·the·line·<pre> | |||
| 00000630:·4752·5542·5f43·4d44·4c49·4e45·5f4c·494e··GRUB_CMDLINE_LIN | |||
| 00000640:·5558·3d22·2e2e·2e22·3c2f·7072·653e·2077··UX="..."</pre>·w | |||
| 00000650:·6974·6869·6e20·3c74·743e·2f65·7463·2f64··ithin·<tt>/etc/d | |||
| 00000660:·6566·6175·6c74·2f67·7275·623c·2f74·743e··efault/grub</tt> | |||
| 00000670:·0a64·6f65·736e·2774·2063·6f6e·7461·696e··.doesn't·contain | |||
| 00000680:·2074·6865·2061·7267·756d·656e·7420·3c74···the·argument·<t | |||
| 00000690:·743e·6e6f·736d·6170·3c2f·7474·3e2e·0a52··t>nosmap</tt>..R | |||
| 000006a0:·756e·2074·6865·2066·6f6c·6c6f·7769·6e67··un·the·following | |||
| 000006b0:·2063·6f6d·6d61·6e64·2074·6f20·7570·6461···command·to·upda | |||
| 000006c0:·7465·2063·6f6d·6d61·6e64·206c·696e·6520··te·command·line· | |||
| 000006d0:·666f·7220·616c·7265·6164·7920·696e·7374··for·already·inst | |||
| 000006e0:·616c·6c65·6420·6b65·726e·656c·733a·0a3c··alled·kernels:.< | |||
| 000006f0:·7072·653e·2320·6772·7562·6279·202d·2d75··pre>#·grubby·--u | |||
| 00000700:·7064·6174·652d·6b65·726e·656c·3d41·4c4c··pdate-kernel=ALL | |||
| 00000710:·202d·2d72·656d·6f76·652d·6172·6773·3d22···--remove-args=" | |||
| 00000720:·6e6f·736d·6170·223c·2f70·7265·3e0a·2020··nosmap"</pre>.·· | |||
| 00000730:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000740:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000750:·2d55·5322·3e0a·2020·2020·2020·2020·4469··-US">.········Di | |||
| 00000760:·7361·626c·696e·6720·534d·4150·2063·616e··sabling·SMAP·can | |||
| 00000770:·2066·6163·696c·6974·6174·6520·6578·706c···facilitate·expl | |||
| 00000780:·6f69·7461·7469·6f6e·206f·6620·7675·6c6e··oitation·of·vuln | |||
| 00000790:·6572·6162·696c·6974·6965·7320·6361·7573··erabilities·caus | |||
| 000007a0:·6564·2062·7920·756e·696e·7465·6e64·6564··ed·by·unintended | |||
| 000007b0:·2061·6363·6573·7320·616e·640a·6d61·6e69···access·and.mani | |||
| 000007c0:·7075·6c61·7469·6f6e·206f·6620·6461·7461··pulation·of·data | |||
| 000007d0:·2069·6e20·7468·6520·7573·6572·2073·7061···in·the·user·spa | |||
| 000007e0:·6365·2e0a·2020·2020·2020·3c2f·7464·3e0a··ce..······</td>. | |||
| 000007f0:·2020·2020·3c2f·7472·3e0a·2020·2020·3c74······</tr>.····<t | |||
| 00000800:·723e·0a20·2020·2020·203c·7464·3e52·313c··r>.······<td>R1< | |||
| 00000810:·2f74·643e·0a20·2020·2020·203c·7464·3e45··/td>.······<td>E | |||
| 00000820:·6e73·7572·6520·534d·4550·2069·7320·6e6f··nsure·SMEP·is·no | |||
| 00000830:·7420·6469·7361·626c·6564·2064·7572·696e··t·disabled·durin | |||
| 00000840:·6720·626f·6f74·3c2f·7464·3e0a·2020·2020··g·boot</td>.···· | |||
| 00000850:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 00000860:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 00000870:·5468·6520·534d·4550·2069·7320·7573·6564··The·SMEP·is·used | |||
| 00000880:·2074·6f20·7072·6576·656e·7420·7468·6520···to·prevent·the· | |||
| 00000890:·7375·7065·7276·6973·6f72·206d·6f64·6520··supervisor·mode· | |||
| 000008a0:·6672·6f6d·2065·7865·6375·7469·6e67·2075··from·executing·u | |||
| 000008b0:·7365·7220·7370·6163·6520·636f·6465·2c0a··ser·space·code,. | |||
| 000008c0:·6974·2069·7320·656e·6162·6c65·6420·6279··it·is·enabled·by | |||
| 000008d0:·2064·6566·6175·6c74·2073·696e·6365·204c···default·since·L | |||
| 000008e0:·696e·7578·206b·6572·6e65·6c20·332e·302e··inux·kernel·3.0. | |||
| 000008f0:·2042·7574·2069·7420·636f·756c·6420·6265···But·it·could·be | |||
| 00000900:·2064·6973·6162·6c65·6420·7468·726f·7567···disabled·throug | |||
| 00000910:·680a·6b65·726e·656c·2062·6f6f·7420·7061··h.kernel·boot·pa | |||
| 00000920:·7261·6d65·7465·7273·2e0a·0a45·6e73·7572··rameters...Ensur | |||
| 00000930:·6520·7468·6174·2053·7570·6572·7669·736f··e·that·Superviso | |||
| 00000940:·7220·4d6f·6465·2045·7865·6375·7469·6f6e··r·Mode·Execution | |||
| 00000950:·2050·7265·7665·6e74·696f·6e20·2853·4d45···Prevention·(SME | |||
| 00000960:·5029·2069·7320·6e6f·7420·6469·7361·626c··P)·is·not·disabl | |||
| 00000970:·6564·2062·790a·7468·6520·3c74·743e·6e6f··ed·by.the·<tt>no | |||
| 00000980:·736d·6570·3c2f·7474·3e20·626f·6f74·2070··smep</tt>·boot·p | |||
| 00000990:·6172·616d·656e·7465·7220·6f70·7469·6f6e··aramenter·option | |||
| 000009a0:·2e0a·0a43·6865·636b·2074·6861·7420·7468··...Check·that·th | |||
| 000009b0:·6520·6c69·6e65·203c·7072·653e·4752·5542··e·line·<pre>GRUB | |||
| 000009c0:·5f43·4d44·4c49·4e45·5f4c·494e·5558·3d22··_CMDLINE_LINUX=" | |||
| 000009d0:·2e2e·2e22·3c2f·7072·653e·2077·6974·6869··..."</pre>·withi | |||
| Max diff block lines reached; 3004386/3040288 bytes (98.82%) of diff not shown. | |||
| Offset 1, 29 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat |
| 2 | Enterprise·Linux·8 | 2 | Enterprise·Linux·8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 20 | ······························mode·from·executing·user·space·code,·it·is | 4 | ······························mode·from·executing·user·space·code,·it·is |
| 21 | ······························enabled·by·default·since·Linux·kernel·3.0. | 5 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 22 | ······························But·it·could·be·disabled·through·kernel·boot | 6 | ······························But·it·could·be·disabled·through·kernel·boot |
| 23 | ······························parameters.·Ensure·that·Supervisor·Mode | 7 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 31, 21 lines modified | Offset 15, 14 lines modified | ||
| 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 33 | ······························argument·nosmep.·Run·the·following·command | 17 | ······························argument·nosmep.·Run·the·following·command |
| 34 | ······························to·update·command·line·for·already·installed | 18 | ······························to·update·command·line·for·already·installed |
| 35 | ······························kernels: | 19 | ······························kernels: |
| 36 | ······························#·grubby·--update-kernel=ALL·--remove- | 20 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 37 | ······························args="nosmep" | 21 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 46 | ······························package·do·not·need·to·install·the·kernel- | 23 | ······························package·do·not·need·to·install·the·kernel- |
| 47 | ······························PAE·package·because·the·64-bit·x86·kernel | 24 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 48 | ······························already·includes·this·support.·However,·if | 25 | ······························already·includes·this·support.·However,·if |
| 49 | ······························the·system·is·32-bit·and·also·supports·the | 26 | ······························the·system·is·32-bit·and·also·supports·the |
| 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 62, 14 lines modified | Offset 39, 37 lines modified | ||
| 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 68 | ···········································································validated. | 45 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 125 lines modified | Offset 99, 14 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 673728/691767 bytes (97.39%) of diff not shown. | |||
| Offset 1844, 463 lines modified | Offset 1844, 463 lines modified | ||
| 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | ||
| 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | ||
| 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | ||
| 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | Diff chunk too large, falling back to line-by-line diff (449 lines added, 449 lines removed) | |
| 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | ||
| 000073a0:·7920·2f62·6f6f·742f·6 | 000073a0:·7920·2f62·6f6f·742f·6566·692f·4546·492f··y·/boot/efi/EFI/ | ||
| 000073b0:· | 000073b0:·7265·6468·6174·2f75·7365·722e·6366·6720··redhat/user.cfg· | ||
| 000073c0:· | 000073c0:·5573·6572·204f·776e·6572·7368·6970·3c2f··User·Ownership</ | ||
| 000073d0:· | 000073d0:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | ||
| 000073e0:·6 | 000073e0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | ||
| 000073f0:· | 000073f0:·2020·2020·2020·2020·5468·6520·6669·6c65··········The·file | ||
| 00007400:· | 00007400:·203c·7474·3e2f·626f·6f74·2f65·6669·2f45···<tt>/boot/efi/E | ||
| 00007410:· | 00007410:·4649·2f72·6564·6861·742f·7573·6572·2e63··FI/redhat/user.c | ||
| 00007420:·6 | 00007420:·6667·3c2f·7474·3e20·7368·6f75·6c64·2062··fg</tt>·should·b | ||
| 00007430:· | 00007430:·6520·6f77·6e65·6420·6279·2074·6865·203c··e·owned·by·the·< | ||
| 00007440:·74 | 00007440:·7474·3e72·6f6f·743c·2f74·743e·0a75·7365··tt>root</tt>.use | ||
| 00007450:· | 00007450:·7220·746f·2070·7265·7665·6e74·2072·6561··r·to·prevent·rea | ||
| 00007460:·6 | 00007460:·6469·6e67·206f·7220·6d6f·6469·6669·6361··ding·or·modifica | ||
| 00007470:· | 00007470:·7469·6f6e·206f·6620·7468·6520·6669·6c65··tion·of·the·file | ||
| 00007480:·20 | 00007480:·2e0a·0a54·6f20·7072·6f70·6572·6c79·2073··...To·properly·s | ||
| 00007490:·6 | 00007490:·6574·2074·6865·206f·776e·6572·206f·6620··et·the·owner·of· | ||
| 000074a0:· | 000074a0:·3c63·6f64·653e·2f62·6f6f·742f·6566·692f··<code>/boot/efi/ | ||
| 000074b0:· | 000074b0:·4546·492f·7265·6468·6174·2f75·7365·722e··EFI/redhat/user. | ||
| 000074c0:·3 | 000074c0:·6366·673c·2f63·6f64·653e·2c20·7275·6e20··cfg</code>,·run· | ||
| 000074d0:· | 000074d0:·7468·6520·636f·6d6d·616e·643a·0a3c·7072··the·command:.<pr | ||
| 000074e0:· | 000074e0:·653e·2420·7375·646f·2063·686f·776e·2072··e>$·sudo·chown·r | ||
| 000074f0:· | 000074f0:·6f6f·7420·2f62·6f6f·742f·6566·692f·4546··oot·/boot/efi/EF | ||
| 00007500:· | 00007500:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 00007510:·6 | 00007510:·6720·3c2f·7072·653e·0a20·2020·2020·203c··g·</pre>.······< | ||
| 00007520:·2 | 00007520:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 00007530:·6 | 00007530:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 00007540:· | 00007540:·0a20·2020·2020·2020·204f·6e6c·7920·726f··.········Only·ro | ||
| 00007550:·7420·6 | 00007550:·6f74·2073·686f·756c·6420·6265·2061·626c··ot·should·be·abl | ||
| 00007560:· | 00007560:·6520·746f·206d·6f64·6966·7920·696d·706f··e·to·modify·impo | ||
| 00007570:·7 | 00007570:·7274·616e·7420·626f·6f74·2070·6172·616d··rtant·boot·param | ||
| 00007580:· | 00007580:·6574·6572·732e·2041·6c73·6f2c·206e·6f6e··eters.·Also,·non | ||
| 00007590:· | 00007590:·2d72·6f6f·7420·7573·6572·7320·7768·6f20··-root·users·who· | ||
| 000075a0:· | 000075a0:·7265·6164·0a74·6865·2062·6f6f·7420·7061··read.the·boot·pa | ||
| 000075b0:· | 000075b0:·7261·6d65·7465·7273·206d·6179·2062·6520··rameters·may·be· | ||
| 000075c0:·6 | 000075c0:·6162·6c65·2074·6f20·6964·656e·7469·6679··able·to·identify | ||
| 000075d0:· | 000075d0:·2077·6561·6b6e·6573·7365·7320·696e·2073···weaknesses·in·s | ||
| 000075e0:·6 | 000075e0:·6563·7572·6974·7920·7570·6f6e·2062·6f6f··ecurity·upon·boo | ||
| 000075f0:· | 000075f0:·7420·616e·6420·6265·2061·626c·6520·746f··t·and·be·able·to | ||
| 00007600:·0a | 00007600:·0a65·7870·6c6f·6974·2074·6865·6d2e·0a20··.exploit·them..· | ||
| 00007610:· | 00007610:·2020·2020·203c·2f74·643e·0a20·2020·203c·······</td>.····< | ||
| 00007620:·2020·2020·203c·74 | 00007620:·2f74·723e·0a20·2020·203c·7472·3e0a·2020··/tr>.····<tr>.·· | ||
| 00007630:· | 00007630:·2020·2020·3c74·643e·312e·332e·323c·2f74······<td>1.3.2</t | ||
| 00007640:·6 | 00007640:·643e·0a20·2020·2020·203c·7464·3e56·6572··d>.······<td>Ver | ||
| 00007650:·6 | 00007650:·6966·7920·7468·6520·5545·4649·2042·6f6f··ify·the·UEFI·Boo | ||
| 00007660:· | 00007660:·7420·4c6f·6164·6572·2067·7275·622e·6366··t·Loader·grub.cf | ||
| 00007670:· | 00007670:·6720·5065·726d·6973·7369·6f6e·733c·2f74··g·Permissions</t | ||
| 00007680:· | 00007680:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | ||
| 00007690:·3 | 00007690:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | ||
| 000076a0:· | 000076a0:·2020·2020·2020·2046·696c·6520·7065·726d·········File·perm | ||
| 000076b0:·673 | 000076b0:·6973·7369·6f6e·7320·666f·7220·3c74·743e··issions·for·<tt> | ||
| 000076c0:·2 | 000076c0:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | ||
| 000076d0:· | 000076d0:·6468·6174·2f67·7275·622e·6366·673c·2f74··dhat/grub.cfg</t | ||
| 000076e0:·3e20·6 | 000076e0:·743e·2073·686f·756c·6420·6265·2073·6574··t>·should·be·set | ||
| 000076f0:· | 000076f0:·2074·6f20·3730·302e·0a0a·546f·2070·726f···to·700...To·pro | ||
| 00007700:·7 | 00007700:·7065·726c·7920·7365·7420·7468·6520·7065··perly·set·the·pe | ||
| 00007710:·66 | 00007710:·726d·6973·7369·6f6e·7320·6f66·203c·636f··rmissions·of·<co | ||
| 00007720:· | 00007720:·6465·3e2f·626f·6f74·2f65·6669·2f45·4649··de>/boot/efi/EFI | ||
| 00007730:·2 | 00007730:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | ||
| 00007740:·3c63 | 00007740:·3c2f·636f·6465·3e2c·2072·756e·2074·6865··</code>,·run·the | ||
| 00007750:· | 00007750:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e24···command:.<pre>$ | ||
| 00007760:· | 00007760:·2073·7564·6f20·6368·6d6f·6420·3730·3020···sudo·chmod·700· | ||
| 00007770:· | 00007770:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | ||
| 00007780:·6 | 00007780:·6468·6174·2f67·7275·622e·6366·673c·2f70··dhat/grub.cfg</p | ||
| 00007790:· | 00007790:·7265·3e0a·2020·2020·2020·3c2f·7464·3e0a··re>.······</td>. | ||
| 000077a0:· | 000077a0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000077b0:·6 | 000077b0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000077c0:· | 000077c0:·2020·2020·5072·6f70·6572·2070·6572·6d69······Proper·permi | ||
| 000077d0:· | 000077d0:·7373·696f·6e73·2065·6e73·7572·6520·7468··ssions·ensure·th | ||
| 000077e0:· | 000077e0:·6174·206f·6e6c·7920·7468·6520·726f·6f74··at·only·the·root | ||
| 000077f0:· | 000077f0:·2075·7365·7220·6361·6e20·6d6f·6469·6679···user·can·modify | ||
| 00007800:· | 00007800:·2069·6d70·6f72·7461·6e74·2062·6f6f·740a···important·boot. | ||
| 00007810:· | 00007810:·7061·7261·6d65·7465·7273·2e0a·2020·2020··parameters..···· | ||
| 00007820:· | 00007820:·2020·3c2f·7464·3e0a·2020·2020·3c2f·7472····</td>.····</tr | ||
| 00007830:· | 00007830:·3e0a·2020·2020·3c74·723e·0a20·2020·2020··>.····<tr>.····· | ||
| 00007840:· | 00007840:·203c·7464·3e31·2e33·2e32·3c2f·7464·3e0a···<td>1.3.2</td>. | ||
| 00007850:· | 00007850:·2020·2020·2020·3c74·643e·5665·7269·6679········<td>Verify | ||
| 00007860:· | 00007860:·202f·626f·6f74·2f65·6669·2f45·4649·2f72···/boot/efi/EFI/r | ||
| 00007870:· | 00007870:·6564·6861·742f·7573·6572·2e63·6667·2047··edhat/user.cfg·G | ||
| 00007880:· | 00007880:·726f·7570·204f·776e·6572·7368·6970·3c2f··roup·Ownership</ | ||
| 00007890:· | 00007890:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | ||
| 000078a0:· | 000078a0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | ||
| 000078b0:· | 000078b0:·2020·2020·2020·2020·5468·6520·6669·6c65··········The·file | ||
| 000078c0:·2 | 000078c0:·203c·7474·3e2f·626f·6f74·2f65·6669·2f45···<tt>/boot/efi/E | ||
| 000078d0:·4 | 000078d0:·4649·2f72·6564·6861·742f·7573·6572·2e63··FI/redhat/user.c | ||
| 000078e0:· | 000078e0:·6667·3c2f·7474·3e20·7368·6f75·6c64·2062··fg</tt>·should·b | ||
| 000078f0:·6 | 000078f0:·6520·6772·6f75·702d·6f77·6e65·6420·6279··e·group-owned·by | ||
| 00007900:· | 00007900:·2074·6865·0a3c·7474·3e72·6f6f·743c·2f74···the.<tt>root</t | ||
| 00007910:· | 00007910:·743e·2067·726f·7570·2074·6f20·7072·6576··t>·group·to·prev | ||
| 00007920:· | 00007920:·656e·7420·7265·6164·696e·6720·6f72·206d··ent·reading·or·m | ||
| 00007930:· | 00007930:·6f64·6966·6963·6174·696f·6e20·6f66·2074··odification·of·t | ||
| 00007940:·6 | 00007940:·6865·2066·696c·652e·0a0a·546f·2070·726f··he·file...To·pro | ||
| 00007950:· | 00007950:·7065·726c·7920·7365·7420·7468·6520·6772··perly·set·the·gr | ||
| 00007960:· | 00007960:·6f75·7020·6f77·6e65·7220·6f66·203c·636f··oup·owner·of·<co | ||
| 00007970:·6 | 00007970:·6465·3e2f·626f·6f74·2f65·6669·2f45·4649··de>/boot/efi/EFI | ||
| 00007980:· | 00007980:·2f72·6564·6861·742f·7573·6572·2e63·6667··/redhat/user.cfg | ||
| 00007990:· | 00007990:·3c2f·636f·6465·3e2c·2072·756e·2074·6865··</code>,·run·the | ||
| 000079a0:· | 000079a0:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e24···command:.<pre>$ | ||
| 000079b0:· | 000079b0:·2073·7564·6f20·6368·6772·7020·726f·6f74···sudo·chgrp·root | ||
| 000079c0:·2 | 000079c0:·202f·626f·6f74·2f65·6669·2f45·4649·2f72···/boot/efi/EFI/r | ||
| 000079d0:· | 000079d0:·6564·6861·742f·7573·6572·2e63·6667·3c2f··edhat/user.cfg</ | ||
| 000079e0:· | 000079e0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 000079f0:· | 000079f0:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00007a00:· | 00007a00:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00007a10:·2 | 00007a10:·2020·2020·2054·6865·203c·7474·3e72·6f6f·······The·<tt>roo | ||
| 00007a20:· | 00007a20:·743c·2f74·743e·2067·726f·7570·2069·7320··t</tt>·group·is· | ||
| 00007a30:· | 00007a30:·6120·6869·6768·6c79·2d70·7269·7669·6c65··a·highly-privile | ||
| 00007a40:· | 00007a40:·6765·6420·6772·6f75·702e·2046·7572·7468··ged·group.·Furth | ||
| 00007a50:· | 00007a50:·6572·6d6f·7265·2c20·7468·6520·6772·6f75··ermore,·the·grou | ||
| 00007a60:·7 | 00007a60:·702d·6f77·6e65·7220·6f66·2074·6869·730a··p-owner·of·this. | ||
| 00007a70:· | 00007a70:·6669·6c65·2073·686f·756c·6420·6e6f·7420··file·should·not· | ||
| 00007a80:· | 00007a80:·6861·7665·2061·6e79·2061·6363·6573·7320··have·any·access· | ||
| 00007a90:· | 00007a90:·7072·6976·696c·6567·6573·2061·6e79·7761··privileges·anywa | ||
| 00007aa0:·20 | 00007aa0:·792e·204e·6f6e·2d72·6f6f·7420·7573·6572··y.·Non-root·user | ||
| 00007ab0:· | 00007ab0:·7320·7768·6f20·7265·6164·2074·6865·2062··s·who·read·the·b | ||
| 00007ac0:·6 | 00007ac0:·6f6f·7420·7061·7261·6d65·7465·7273·0a6d··oot·parameters.m | ||
| 00007ad0:· | 00007ad0:·6179·2062·6520·6162·6c65·2074·6f20·6964··ay·be·able·to·id | ||
| 00007ae0:· | 00007ae0:·656e·7469·6679·2077·6561·6b6e·6573·7365··entify·weaknesse | ||
| 00007af0:· | 00007af0:·7320·696e·2073·6563·7572·6974·7920·7570··s·in·security·up | ||
| 00007b00:· | 00007b00:·6f6e·2062·6f6f·7420·616e·6420·6265·2061··on·boot·and·be·a | ||
| Max diff block lines reached; 1064663/1127203 bytes (94.45%) of diff not shown. | |||
| Offset 464, 30 lines modified | Offset 464, 48 lines modified | ||
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ·····························································································Only·root·should·be | 468 | ·····························································································Only·root·should·be |
| 469 | ·····························································································able·to·modify | 469 | ·····························································································able·to·modify |
| 470 | ·····························································································important·boot | 470 | ·····························································································important·boot |
| 471 | ······································The·file·/boot/ | 471 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, |
| 472 | ··················Verify·/boot/ | 472 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who |
| 473 | 1.3.2············· | 473 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot |
| 474 | ··················Ownership······ | 474 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be |
| 475 | ······································$·sudo·chown·root·/boot/ | 475 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify |
| 476 | ·····························································································weaknesses·in | 476 | ·····························································································weaknesses·in |
| 477 | ·····························································································security·upon·boot | 477 | ·····························································································security·upon·boot |
| 478 | ·····························································································and·be·able·to | 478 | ·····························································································and·be·able·to |
| 479 | ·····························································································exploit·them. | 479 | ·····························································································exploit·them. |
| 480 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 481 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 480 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 481 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 482 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 483 | 1.3.2·············grub.cfg· | 482 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify |
| 484 | ··················Ownership···········command:···············································this·file·should·not | ||
| 485 | ·················· | 483 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot |
| 484 | ·····························································································parameters. | ||
| 485 | ·····························································································The·root·group·is·a | ||
| 486 | ····························································································· | 486 | ·····························································································highly-privileged |
| 487 | ·····························································································group.·Furthermore, | ||
| 488 | ·····························································································the·group-owner·of | ||
| 489 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | ||
| 490 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 491 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 492 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 493 | ··················Group·Ownership·····command:···············································read·the·boot | ||
| 494 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | ||
| 495 | ·····························································································able·to·identify | ||
| 496 | ·····························································································weaknesses·in | ||
| 497 | ·····························································································security·upon·boot | ||
| 498 | ·····························································································and·be·able·to | ||
| 499 | ·····························································································exploit·them. | ||
| 500 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 501 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 502 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 503 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 504 | ·····························································································boot·parameters. | ||
| 487 | ·····························································································The·root·group·is·a | 505 | ·····························································································The·root·group·is·a |
| 488 | ·····························································································highly-privileged | 506 | ·····························································································highly-privileged |
| 489 | ·····························································································group.·Furthermore, | 507 | ·····························································································group.·Furthermore, |
| 490 | ·····························································································the·group-owner·of | 508 | ·····························································································the·group-owner·of |
| 491 | ·····························································································this·file·should·not | 509 | ·····························································································this·file·should·not |
| 492 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | 510 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access |
| 493 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | 511 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. |
| Offset 495, 78 lines modified | Offset 513, 60 lines modified | ||
| 495 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | 513 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot |
| 496 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be | 514 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be |
| 497 | ·····························································································able·to·identify | 515 | ·····························································································able·to·identify |
| 498 | ·····························································································weaknesses·in | 516 | ·····························································································weaknesses·in |
| 499 | ·····························································································security·upon·boot | 517 | ·····························································································security·upon·boot |
| 500 | ·····························································································and·be·able·to | 518 | ·····························································································and·be·able·to |
| 501 | ·····························································································exploit·them. | 519 | ·····························································································exploit·them. |
| 502 | ······································The·file·/boot/ | 520 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a |
| 503 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 504 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 505 | ·················· | 521 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged |
| 522 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 523 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 524 | ··················Ownership···········command:···············································this·file·should·not | ||
| 506 | ······································$·sudo·ch | 525 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access |
| 507 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 508 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 509 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 510 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 511 | ·····························································································boot·parameters. | ||
| 512 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 513 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 514 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 515 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 516 | ·····························································································boot·parameters. | ||
| 517 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 518 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 519 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 520 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 521 | ·····························································································p | 526 | ·····························································································privileges·anyway. |
| 522 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 523 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 524 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 525 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 526 | ·····························································································parameters. | ||
| 527 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | 527 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be |
| 528 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | 528 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify |
| 529 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | 529 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot |
| 530 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | 530 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. |
| 531 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | 531 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg |
| 532 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | ||
| 533 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 534 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 535 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 536 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 532 | ·····························································································The·root·group·is·a | 537 | ·····························································································The·root·group·is·a |
| 533 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | 538 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged |
| 534 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | 539 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, |
| 535 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | 540 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of |
| 536 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | 541 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not |
| 537 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | 542 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access |
| 538 | ·····························································································privileges·anyway. | 543 | ·····························································································privileges·anyway. |
| 539 | ·····························································································The·root·group·is·a | ||
| 540 | ·····························································································highly-privileged | ||
| 541 | ·····························································································group.·Furthermore, | ||
| 542 | ·····························································································the·group-owner·of | ||
| 543 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | ||
| 544 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 545 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 546 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 547 | ··················Group·Ownership·····command:···············································read·the·boot | ||
| 548 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | ||
| 549 | ·····························································································able·to·identify | ||
| 550 | ·····························································································weaknesses·in | ||
| 551 | ·····························································································security·upon·boot | ||
| 552 | ·····························································································and·be·able·to | ||
| 553 | ·····························································································exploit·them. | ||
| 554 | ·····························································································Only·root·should·be | 544 | ·····························································································Only·root·should·be |
| 555 | ·····························································································able·to·modify | 545 | ·····························································································able·to·modify |
| 556 | ·····························································································important·boot | 546 | ·····························································································important·boot |
| 557 | ······································The·file·/boot/ | 547 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, |
| 558 | ··················Verify·/boot/ | 548 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who |
| 559 | 1.3.2············· | 549 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot |
| 560 | ·················· | 550 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be |
| Max diff block lines reached; 339387/355523 bytes (95.46%) of diff not shown. | |||
| Offset 40, 14 lines modified | Offset 40, 57 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Red·Hat·Enterprise·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td>Disable·SSH·Root·Login</td> | 91 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 50 | ········The·root·user·should·never·be·allowed·to·login·to·a | 93 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 51 | system·directly·over·a·network. | 94 | system·directly·over·a·network. |
| 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 62, 31 lines modified | Offset 105, 51 lines modified | ||
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 107 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 108 | ······</td> |
| 66 | ····</tr> | 109 | ····</tr> |
| 67 | ····<tr> | 110 | ····<tr> |
| 68 | ······<td>3.1.1</td> | 111 | ······<td>3.1.1</td> |
| 69 | ······<td>Disable·GDM· | 112 | ······<td>Disable·GDM·Automatic·Login</td> |
| 70 | ······<td·xml:lang="en-US"> | 113 | ······<td·xml:lang="en-US"> |
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without |
| 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | ||
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | |
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | |
| 76 | <pre>[daemon] | 119 | <pre>[daemon] |
| 77 | 120 | AutomaticLoginEnable=false</pre> | |
| 78 | ······</td> | 121 | ······</td> |
| 79 | ······<td·xml:lang="en-US"> | 122 | ······<td·xml:lang="en-US"> |
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 81 | system·security. | 124 | system·security. |
| 82 | ······</td> | 125 | ······</td> |
| 83 | ····</tr> | 126 | ····</tr> |
| 84 | ····<tr> | 127 | ····<tr> |
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 128 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 86 | ······<td>Verify·Only·Root·Has·UID·0</td> | 147 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 87 | ······<td·xml:lang="en-US"> | 148 | ······<td·xml:lang="en-US"> |
| 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 90 | their·UID·changed. | 151 | their·UID·changed. |
| 91 | <br·/> | 152 | <br·/> |
| 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 125, 77 lines modified | Offset 188, 14 lines modified | ||
| 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 127 | misconfiguration·elsewhere. | 190 | misconfiguration·elsewhere. |
| 128 | ······</td> | 191 | ······</td> |
| 129 | ····</tr> | 192 | ····</tr> |
| 130 | ····<tr> | 193 | ····<tr> |
| 131 | ······<td>3.1.1<br/>3.1.5</td> | 194 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 457839/465871 bytes (98.28%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 38 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red |
| 2 | Hat·Enterprise·Linux·8 | 2 | Hat·Enterprise·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Red·Hat·······login,·then·escalate | ||
| 13 | ·······································Enterprise·Linux·8's·/etc/securetty·file·only·allows···to·privileged·(root) | ||
| 14 | ·······································the·root·user·to·login·at·the·console·physically·······access·via·su·/ | ||
| 15 | ·······································attached·to·the·system.·To·prevent·root·from·logging···sudo.·This·is | ||
| 16 | ·······································in,·remove·the·contents·of·this·file.·To·prevent·······required·for·FISMA | ||
| 17 | ·······································direct·root·logins,·remove·the·contents·of·this·file···Low·and·FISMA | ||
| 18 | ·······································by·typing·the·following·command:·······················Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 3 | ······························································································Even·though·the | 28 | ······························································································Even·though·the |
| 4 | ······························································································communications | 29 | ······························································································communications |
| 5 | ······························································································channel·may·be | 30 | ······························································································channel·may·be |
| 6 | ······························································································encrypted,·an | 31 | ······························································································encrypted,·an |
| 7 | ······························································································additional·layer·of | 32 | ······························································································additional·layer·of |
| 8 | ······························································································security·is·gained | 33 | ······························································································security·is·gained |
| 9 | ······························································································by·extending·the | 34 | ······························································································by·extending·the |
| Offset 22, 23 lines modified | Offset 47, 34 lines modified | ||
| 22 | ······························································································actions·performed·on | 47 | ······························································································actions·performed·on |
| 23 | ······························································································the·system·and·also | 48 | ······························································································the·system·and·also |
| 24 | ······························································································helps·to·minimize | 49 | ······························································································helps·to·minimize |
| 25 | ······························································································direct·attack | 50 | ······························································································direct·attack |
| 26 | ······························································································attempts·on·root's | 51 | ······························································································attempts·on·root's |
| 27 | ······························································································password. | 52 | ······························································································password. |
| 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 29 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 33 | ······································· | 54 | ·······································automatically·login·without·user·interaction·or |
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 58 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 34 | ······································· | 59 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system |
| 35 | ·······································etc/gdm/custom.conf.·For·example: | 60 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. |
| 36 | ·······································[daemon] | 61 | ·······································[daemon] |
| 37 | ······································· | 62 | ·······································AutomaticLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 38 | ······························································································An·account·has·root | 74 | ······························································································An·account·has·root |
| 39 | ······························································································authority·if·it·has | 75 | ······························································································authority·if·it·has |
| 40 | ······························································································a·UID·of·0.·Multiple | 76 | ······························································································a·UID·of·0.·Multiple |
| 41 | ······························································································accounts·with·a·UID | 77 | ······························································································accounts·with·a·UID |
| 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 61, 114 lines modified | Offset 97, 54 lines modified | ||
| 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 67 | ·······································passwords. | 103 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 76 | ······························································································ | 104 | ······························································································Preventing·direct |
| 77 | ······························································································o | 105 | ······························································································root·login·to·serial |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 78 | ······························································································ | 111 | ······························································································root·account. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 79 | ······························································································This·prevents | 122 | ······························································································This·prevents |
| 80 | ······························································································attackers·with | 123 | ······························································································attackers·with |
| 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 87 | ·······································emergency.service.·····································prevented·by | 130 | ·······································emergency.service.·····································prevented·by |
| 88 | ······························································································configuring·the | 131 | ······························································································configuring·the |
| 89 | ······························································································bootloader·password. | 132 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| Max diff block lines reached; 802318/820276 bytes (97.81%) of diff not shown. | |||
| Offset 4138, 15 lines modified | Offset 4138, 15 lines modified | ||
| 4138 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4138 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4139 | ··</td> | 4139 | ··</td> |
| 4140 | ··<td·xml:lang="en-US"> | 4140 | ··<td·xml:lang="en-US"> |
| 4141 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4141 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4142 | time-based·limit,·effects·of·potential·attacks·against | 4142 | time-based·limit,·effects·of·potential·attacks·against |
| 4143 | encryption·keys·are·limited. | 4143 | encryption·keys·are·limited. |
| 4144 | ··</td> | 4144 | ··</td> |
| 4145 | ··<td>var_rekey_limit_ | 4145 | ··<td>var_rekey_limit_time=1hour<br/>var_rekey_limit_size=1G</td> |
| 4146 | </tr> | 4146 | </tr> |
| 4147 | <tr> | 4147 | <tr> |
| 4148 | ··<td></td> | 4148 | ··<td></td> |
| 4149 | ··<td>CCE-82462-3</td> | 4149 | ··<td>CCE-82462-3</td> |
| 4150 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4150 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4151 | ··<td·xml:lang="en-US"> | 4151 | ··<td·xml:lang="en-US"> |
| 4152 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4152 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3416, 16 lines modified | Offset 3416, 16 lines modified | ||
| 3416 | ······················································································································generator·used·by | 3416 | ······················································································································generator·used·by |
| 3417 | ······················································································································SSH·would·be·known | 3417 | ······················································································································SSH·would·be·known |
| 3418 | ······················································································································to·potential | 3418 | ······················································································································to·potential |
| 3419 | ······················································································································attackers. | 3419 | ······················································································································attackers. |
| 3420 | ······················································································································By·decreasing·the | 3420 | ······················································································································By·decreasing·the |
| 3421 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3421 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3422 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3422 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3423 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3423 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_time=1hour |
| 3424 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3424 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_size=1G |
| 3425 | ·····························RekeyLimit·1G·1hour······································································potential·attacks | 3425 | ·····························RekeyLimit·1G·1hour······································································potential·attacks |
| 3426 | ······················································································································against·encryption | 3426 | ······················································································································against·encryption |
| 3427 | ······················································································································keys·are·limited. | 3427 | ······················································································································keys·are·limited. |
| 3428 | ······················································································································SSH·implementation | 3428 | ······················································································································SSH·implementation |
| 3429 | ······················································································································in·Red·Hat | 3429 | ······················································································································in·Red·Hat |
| 3430 | ······················································································································Enterprise·Linux·8 | 3430 | ······················································································································Enterprise·Linux·8 |
| 3431 | ······················································································································uses·the·openssl | 3431 | ······················································································································uses·the·openssl |
| Offset 64, 14949 lines modified | Offset 64, 14949 lines modified | ||
| 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | ||
| 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | ||
| 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | ||
| 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | Diff chunk too large, falling back to line-by-line diff (14935 lines added, 14935 lines removed) | |
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·286 | 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000470:· | 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | ||
| 00000480:· | 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | ||
| 00000490:·6 | 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | ||
| 000004a0:·6 | 000004a0:·643e·456e·7375·7265·2061·7564·6974·6420··d>Ensure·auditd· | ||
| 000004b0:· | 000004b0:·436f·6c6c·6563·7473·2049·6e66·6f72·6d61··Collects·Informa | ||
| 000004c0:· | 000004c0:·7469·6f6e·206f·6e20·7468·6520·5573·6520··tion·on·the·Use· | ||
| 000004d0:· | 000004d0:·6f66·2050·7269·7669·6c65·6765·6420·436f··of·Privileged·Co | ||
| 000004e0:·6 | 000004e0:·6d6d·616e·6473·202d·2073·7368·2d6b·6579··mmands·-·ssh-key | ||
| 000004f0:· | 000004f0:·7369·676e·3c2f·7464·3e0a·2020·2020·2020··sign</td>.······ | ||
| 00000500:· | 00000500:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000510:· | 00000510:·2d55·5322·3e0a·2020·2020·2020·2020·4174··-US">.········At | ||
| 00000520:· | 00000520:·2061·206d·696e·696d·756d·2c20·7468·6520···a·minimum,·the· | ||
| 00000530:·6175·6469·74 | 00000530:·6175·6469·7420·7379·7374·656d·2073·686f··audit·system·sho | ||
| 00000540:· | 00000540:·756c·6420·636f·6c6c·6563·7420·7468·6520··uld·collect·the· | ||
| 00000550:·6 | 00000550:·6578·6563·7574·696f·6e20·6f66·0a70·7269··execution·of.pri | ||
| 00000560:· | 00000560:·7669·6c65·6765·6420·636f·6d6d·616e·6473··vileged·commands | ||
| 00000570:· | 00000570:·2066·6f72·2061·6c6c·2075·7365·7273·2061···for·all·users·a | ||
| 00000580:·6 | 00000580:·6e64·2072·6f6f·742e·2049·6620·7468·6520··nd·root.·If·the· | ||
| 00000590:· | 00000590:·3c74·743e·6175·6469·7464·3c2f·7474·3e20··<tt>auditd</tt>· | ||
| 000005a0:· | 000005a0:·6461·656d·6f6e·2069·730a·636f·6e66·6967··daemon·is.config | ||
| 000005b0:· | 000005b0:·7572·6564·2074·6f20·7573·6520·7468·6520··ured·to·use·the· | ||
| 000005c0:· | 000005c0:·3c74·743e·6175·6765·6e72·756c·6573·3c2f··<tt>augenrules</ | ||
| 000005d0:· | 000005d0:·7474·3e20·7072·6f67·7261·6d20·746f·2072··tt>·program·to·r | ||
| 000005e0:· | 000005e0:·6561·6420·6175·6469·7420·7275·6c65·7320··ead·audit·rules· | ||
| 000005f0:· | 000005f0:·6475·7269·6e67·0a64·6165·6d6f·6e20·7374··during.daemon·st | ||
| 00000600:·6 | 00000600:·6172·7475·7020·2874·6865·2064·6566·6175··artup·(the·defau | ||
| 00000610:·6 | 00000610:·6c74·292c·2061·6464·2061·206c·696e·6520··lt),·add·a·line· | ||
| 00000620:·6 | 00000620:·6f66·2074·6865·2066·6f6c·6c6f·7769·6e67··of·the·following | ||
| 00000630:·6 | 00000630:·2066·6f72·6d20·746f·2061·2066·696c·6520···form·to·a·file· | ||
| 00000640:· | 00000640:·7769·7468·0a73·7566·6669·7820·3c74·743e··with.suffix·<tt> | ||
| 00000650:· | 00000650:·2e72·756c·6573·3c2f·7474·3e20·696e·2074··.rules</tt>·in·t | ||
| 00000660:· | 00000660:·6865·2064·6972·6563·746f·7279·203c·7474··he·directory·<tt | ||
| 00000670:· | 00000670:·3e2f·6574·632f·6175·6469·742f·7275·6c65··>/etc/audit/rule | ||
| 00000680:· | 00000680:·732e·643c·2f74·743e·3a0a·3c70·7265·3e2d··s.d</tt>:.<pre>- | ||
| 00000690:· | 00000690:·6120·616c·7761·7973·2c65·7869·7420·2d46··a·always,exit·-F | ||
| 000006a0:· | 000006a0:·2070·6174·683d·2f75·7372·2f6c·6962·6578···path=/usr/libex | ||
| 000006b0:· | 000006b0:·6563·2f6f·7065·6e73·7368·2f73·7368·2d6b··ec/openssh/ssh-k | ||
| 000006c0:· | 000006c0:·6579·7369·676e·202d·4620·7065·726d·3d78··eysign·-F·perm=x | ||
| 000006d0:· | 000006d0:·202d·4620·6175·6964·2667·743b·3d31·3030···-F·auid>=100 | ||
| 000006e0:· | 000006e0:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 000006f0:· | 000006f0:·202d·4620·6b65·793d·7072·6976·696c·6567···-F·key=privileg | ||
| 00000700:·6 | 00000700:·6564·3c2f·7072·653e·0a49·6620·7468·6520··ed</pre>.If·the· | ||
| 00000710:· | 00000710:·3c74·743e·6175·6469·7464·3c2f·7474·3e20··<tt>auditd</tt>· | ||
| 00000720:· | 00000720:·6461·656d·6f6e·2069·7320·636f·6e66·6967··daemon·is·config | ||
| 00000730:· | 00000730:·7572·6564·2074·6f20·7573·6520·7468·6520··ured·to·use·the· | ||
| 00000740:· | 00000740:·3c74·743e·6175·6469·7463·746c·3c2f·7474··<tt>auditctl</tt | ||
| 00000750:· | 00000750:·3e0a·7574·696c·6974·7920·746f·2072·6561··>.utility·to·rea | ||
| 00000760:·6 | 00000760:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 00000770:· | 00000770:·7269·6e67·2064·6165·6d6f·6e20·7374·6172··ring·daemon·star | ||
| 00000780:· | 00000780:·7475·702c·2061·6464·2061·206c·696e·6520··tup,·add·a·line· | ||
| 00000790:· | 00000790:·6f66·2074·6865·2066·6f6c·6c6f·7769·6e67··of·the·following | ||
| 000007a0:· | 000007a0:·0a66·6f72·6d20·746f·203c·7474·3e2f·6574··.form·to·<tt>/et | ||
| 000007b0:·63 | 000007b0:·632f·6175·6469·742f·6175·6469·742e·7275··c/audit/audit.ru | ||
| 000007c0:·6 | 000007c0:·6c65·733c·2f74·743e·3a0a·3c70·7265·3e2d··les</tt>:.<pre>- | ||
| 000007d0:· | 000007d0:·6120·616c·7761·7973·2c65·7869·7420·2d46··a·always,exit·-F | ||
| 000007e0:· | 000007e0:·2070·6174·683d·2f75·7372·2f6c·6962·6578···path=/usr/libex | ||
| 000007f0:·6 | 000007f0:·6563·2f6f·7065·6e73·7368·2f73·7368·2d6b··ec/openssh/ssh-k | ||
| 00000800:· | 00000800:·6579·7369·676e·202d·4620·7065·726d·3d78··eysign·-F·perm=x | ||
| 00000810:· | 00000810:·202d·4620·6175·6964·2667·743b·3d31·3030···-F·auid>=100 | ||
| 00000820:·3 | 00000820:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 00000830:·20 | 00000830:·202d·4620·6b65·793d·7072·6976·696c·6567···-F·key=privileg | ||
| 00000840:·662 | 00000840:·6564·3c2f·7072·653e·0a20·2020·2020·203c··ed</pre>.······< | ||
| 00000850:·2 | 00000850:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 00000860:· | 00000860:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 00000870:· | 00000870:·0a20·2020·2020·2020·204d·6973·7573·6520··.········Misuse· | ||
| 00000880:· | 00000880:·6f66·2070·7269·7669·6c65·6765·6420·6675··of·privileged·fu | ||
| 00000890:·6 | 00000890:·6e63·7469·6f6e·732c·2065·6974·6865·7220··nctions,·either· | ||
| 000008a0:·6 | 000008a0:·696e·7465·6e74·696f·6e61·6c6c·7920·6f72··intentionally·or | ||
| 000008b0:· | 000008b0:·2075·6e69·6e74·656e·7469·6f6e·616c·6c79···unintentionally | ||
| 000008c0:· | 000008c0:·2062·790a·6175·7468·6f72·697a·6564·2075···by.authorized·u | ||
| 000008d0:· | 000008d0:·7365·7273·2c20·6f72·2062·7920·756e·6175··sers,·or·by·unau | ||
| 000008e0:· | 000008e0:·7468·6f72·697a·6564·2065·7874·6572·6e61··thorized·externa | ||
| 000008f0:·6 | 000008f0:·6c20·656e·7469·7469·6573·2074·6861·7420··l·entities·that· | ||
| 00000900:·617 | 00000900:·6861·7665·2063·6f6d·7072·6f6d·6973·6564··have·compromised | ||
| 00000910:· | 00000910:·2073·7973·7465·6d20·6163·636f·756e·7473···system·accounts | ||
| 00000920:· | 00000920:·2c0a·6973·2061·2073·6572·696f·7573·2061··,.is·a·serious·a | ||
| 00000930:· | 00000930:·6e64·206f·6e67·6f69·6e67·2063·6f6e·6365··nd·ongoing·conce | ||
| 00000940:·6 | 00000940:·726e·2061·6e64·2063·616e·2068·6176·6520··rn·and·can·have· | ||
| 00000950:· | 00000950:·7369·676e·6966·6963·616e·7420·6164·7665··significant·adve | ||
| 00000960:·7 | 00000960:·7273·6520·696d·7061·6374·7320·6f6e·206f··rse·impacts·on·o | ||
| 00000970:· | 00000970:·7267·616e·697a·6174·696f·6e73·2e0a·4175··rganizations..Au | ||
| 00000980:·6 | 00000980:·6469·7469·6e67·2074·6865·2075·7365·206f··diting·the·use·o | ||
| 00000990:·6 | 00000990:·6620·7072·6976·696c·6567·6564·2066·756e··f·privileged·fun | ||
| 000009a0:· | 000009a0:·6374·696f·6e73·2069·7320·6f6e·6520·7761··ctions·is·one·wa | ||
| 000009b0:· | 000009b0:·7920·746f·2064·6574·6563·7420·7375·6368··y·to·detect·such | ||
| 000009c0:· | 000009c0:·206d·6973·7573·6520·616e·6420·6964·656e···misuse·and·iden | ||
| 000009d0:·7 | 000009d0:·7469·6679·0a74·6865·2072·6973·6b20·6672··tify.the·risk·fr | ||
| 000009e0:·6 | 000009e0:·6f6d·2069·6e73·6964·6572·2061·6e64·2061··om·insider·and·a | ||
| 000009f0:·6 | 000009f0:·6476·616e·6365·6420·7065·7273·6973·7465··dvanced·persiste | ||
| 00000a00:·6 | 00000a00:·6e74·2074·6872·6561·7473·2e0a·3c62·7220··nt·threats..<br· | ||
| 00000a10:· | 00000a10:·2f3e·3c62·7220·2f3e·0a50·7269·7669·6c65··/><br·/>.Privile | ||
| 00000a20:· | 00000a20:·6765·6420·7072·6f67·7261·6d73·2061·7265··ged·programs·are | ||
| 00000a30:·20 | 00000a30:·2073·7562·6a65·6374·2074·6f20·6573·6361···subject·to·esca | ||
| 00000a40:· | 00000a40:·6c61·7469·6f6e·2d6f·662d·7072·6976·696c··lation-of-privil | ||
| 00000a50:· | 00000a50:·6567·6520·6174·7461·636b·732c·0a77·6869··ege·attacks,.whi | ||
| 00000a60:·6 | 00000a60:·6368·2061·7474·656d·7074·2074·6f20·7375··ch·attempt·to·su | ||
| 00000a70:· | 00000a70:·6276·6572·7420·7468·6569·7220·6e6f·726d··bvert·their·norm | ||
| 00000a80:·6 | 00000a80:·616c·2072·6f6c·6520·6f66·2070·726f·7669··al·role·of·provi | ||
| 00000a90:· | 00000a90:·6469·6e67·2073·6f6d·6520·6e65·6365·7373··ding·some·necess | ||
| 00000aa0:· | 00000aa0:·6172·7920·6275·740a·6c69·6d69·7465·6420··ary·but.limited· | ||
| 00000ab0:· | 00000ab0:·6361·7061·6269·6c69·7479·2e20·4173·2073··capability.·As·s | ||
| 00000ac0:·75 | 00000ac0:·7563·682c·206d·6f74·6976·6174·696f·6e20··uch,·motivation· | ||
| 00000ad0:· | 00000ad0:·6578·6973·7473·2074·6f20·6d6f·6e69·746f··exists·to·monito | ||
| 00000ae0:· | 00000ae0:·7220·7468·6573·6520·7072·6f67·7261·6d73··r·these·programs | ||
| 00000af0:· | 00000af0:·2066·6f72·0a75·6e75·7375·616c·2061·6374···for.unusual·act | ||
| 00000b00:·6 | 00000b00:·6976·6974·792e·0a20·2020·2020·203c·2f74··ivity..······</t | ||
| 00000b10:· | 00000b10:·643e·0a20·2020·203c·2f74·723e·0a20·2020··d>.····</tr>.··· | ||
| 00000b20:· | 00000b20:·203c·7472·3e0a·2020·2020·2020·3c74·643e···<tr>.······<td> | ||
| 00000b30:· | 00000b30:·4155·2d32·2864·293c·6272·2f3e·4155·2d31··AU-2(d)<br/>AU-1 | ||
| 00000b40:· | 00000b40:·3228·6329·3c62·722f·3e43·4d2d·3628·6129··2(c)<br/>CM-6(a) | ||
| 00000b50:· | 00000b50:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 00000b60:· | 00000b60:·5265·636f·7264·2045·7665·6e74·7320·7468··Record·Events·th | ||
| 00000b70:·61 | 00000b70:·6174·204d·6f64·6966·7920·7468·6520·5379··at·Modify·the·Sy | ||
| 00000b80:·7 | 00000b80:·7374·656d·2773·2044·6973·6372·6574·696f··stem's·Discretio | ||
| 00000b90:· | 00000b90:·6e61·7279·2041·6363·6573·7320·436f·6e74··nary·Access·Cont | ||
| 00000ba0:· | 00000ba0:·726f·6c73·202d·206c·7365·7478·6174·7472··rols·-·lsetxattr | ||
| 00000bb0:·3 | 00000bb0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 00000bc0:· | 00000bc0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| Max diff block lines reached; 5370439/7432047 bytes (72.26%) of diff not shown. | |||
| Offset 73, 28 lines modified | Offset 73, 14 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 24 lines modified | Offset 157, 26 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | 166 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | network. | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 174 | ······</td> | 176 | ······</td> |
| 175 | ····</tr> | 177 | ····</tr> |
| 176 | ····<tr> | 178 | ····<tr> |
| 177 | ······<td>Req-1.4.1</td> | 179 | ······<td>Req-1.4.1</td> |
| 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 179 | ······<td·xml:lang="en-US"> | 181 | ······<td·xml:lang="en-US"> |
| 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 187, 26 lines modified | Offset 189, 24 lines modified | ||
| 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 189 | enables·the·system·to·continue·servicing·valid·connection·requests. | 191 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 190 | ······</td> | 192 | ······</td> |
| 191 | ····</tr> | 193 | ····</tr> |
| 192 | ····<tr> | 194 | ····<tr> |
| 193 | ······<td>Req-1.4.1</td> | 195 | ······<td>Req-1.4.1</td> |
| 194 | ······<td> | 196 | ······<td>Install·iptables·Package</td> |
| 195 | ······<td·xml:lang="en-US"> | 197 | ······<td·xml:lang="en-US"> |
| 196 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | netwo | 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 199 | <pre> | ||
| 200 | $·sudo·yum·install·iptables</pre> | ||
| 199 | ······</td> | 201 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 202 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | masquerading,·etc. | ||
| 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 23 lines modified | Offset 246, 40 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 295053/300896 bytes (98.06%) of diff not shown. | |||
| Offset 34, 14 lines modified | Offset 34, 26 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 23 lines modified | Offset 112, 31 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 119 | ···················································································· | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | ||
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 120 | ···················································································· | 125 | ····················································································system.·The |
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 121 | ····················································································network· | 129 | ····················································································network·traffic |
| 130 | ····················································································should·be·seen,·all | ||
| 131 | ····················································································other·interfaces | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································s | 132 | ····················································································should·ignore |
| 126 | ····················································································an | 133 | ····················································································traffic·on·this |
| 134 | ····················································································network·as·an·anti- | ||
| 127 | ···················································································· | 135 | ····················································································spoofing·measure. |
| 128 | ····················································································A·TCP·SYN·flood | 136 | ····················································································A·TCP·SYN·flood |
| 129 | ····················································································attack·can·cause·a | 137 | ····················································································attack·can·cause·a |
| 130 | ····················································································denial·of·service | 138 | ····················································································denial·of·service |
| 131 | ····················································································by·filling·a | 139 | ····················································································by·filling·a |
| 132 | ····················································································system's·TCP | 140 | ····················································································system's·TCP |
| 133 | ····················································································connection·table | 141 | ····················································································connection·table |
| 134 | ····················································································with·connections·in | 142 | ····················································································with·connections·in |
| Offset 147, 31 lines modified | Offset 155, 23 lines modified | ||
| 147 | ····················································································flood·condition·is | 155 | ····················································································flood·condition·is |
| 148 | ····················································································detected,·and | 156 | ····················································································detected,·and |
| 149 | ····················································································enables·the·system | 157 | ····················································································enables·the·system |
| 150 | ····················································································to·continue | 158 | ····················································································to·continue |
| 151 | ····················································································servicing·valid | 159 | ····················································································servicing·valid |
| 152 | ····················································································connection | 160 | ····················································································connection |
| 153 | ····················································································requests. | 161 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 156 | ····················································································p | 162 | ····················································································iptables·controls |
| 157 | ···················································································· | 163 | ····················································································the·Linux·kernel |
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 160 | ····················································································system.·The | ||
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·packet |
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 165 | ····················································································s | 168 | ····················································································set·up·firewalls |
| 166 | ····················································································other·interfaces | ||
| 167 | ···················································································· | 169 | ····················································································and·IP |
| 168 | ····················································································traffic·on·this | ||
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ····················································································s | 170 | ····················································································masquerading,·etc. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 24 lines modified | Offset 187, 54 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 482720/496307 bytes (97.26%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> | 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> |
| 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> | 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> |
| 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> | 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> |
| 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> | 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 3, 3559 lines modified | Offset 3, 3559 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> | ||
| 17 | ······<ocil:title>Ensure·the·audit·Subsystem·is·Installed</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-package_audit_installed_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·User</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> | ||
| 29 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-ensure_root_password_configured_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·Authentication·Required·for·Single·User·Mode</ocil:title> | ||
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-ensure_root_password_configured_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_password_auth_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_nosuid_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Add·nosuid·Option·to·/var</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_nosuid_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-package_nginx_removed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Uninstall·nginx·Package</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-package_nginx_removed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-grub2_audit_backlog_limit_argument_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Extend·Audit·Backlog·Limit·for·the·Audit·Daemon</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-grub2_audit_backlog_limit_argument_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts | 40 | ····<ocil:questionnaire·id="ocil:ssg-account_password_pam_faillock_system_auth_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Configure·the·Use·of·the·pam_faillock.so·Module·in·the·/etc/pam.d/system-auth·File.</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-accounts | 43 | ········<ocil:test_action_ref>ocil:ssg-account_password_pam_faillock_system_auth_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_disabled_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Limit·Password·Reuse:·system-auth</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_at_allow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Permissions·on·/etc/at.allow·file</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_at_allow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fsetxattr_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fsetxattr</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fsetxattr_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-package_cups_removed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Uninstall·CUPS·Package</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-package_cups_removed_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_usb-storage_disabled_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_nodev_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Add·nodev·Option·to·/var/tmp</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_nodev_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_yama_ptrace_scope_ocil:questionnaire:1"> | ||
| 89 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> | ||
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-ss | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firewalld_loopback_traffic_trusted_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Configure·Firewalld·to·Trust·Loopback·Traffic</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-firewalld_loopback_traffic_trusted_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_nodev_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Add·nodev·Option·to·/var</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_nodev_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chown_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-· | 107 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chown</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| Max diff block lines reached; 723245/735378 bytes (98.35%) of diff not shown. | |||
| Offset 3, 2799 lines modified | Offset 3, 2799 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_ipv6_option_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable·IPv6· | 17 | ······<ocil:title>Disable·IPv6·Networking·Support·Automatic·Loading</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_ipv6_option_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_net_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_nopasswd_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-s | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_grub2_cfg_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_at_allow_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify·User·Who·Owns·/etc/at.allow·file</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_disabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·SSH·Server·If·Possible</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_sshd_disabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_chrony_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>The·Chrony·package·is·installed</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-package_chrony_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_lcredit_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·rs | 71 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Lowercase·Characters</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_lcredit_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_ntpd_enabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_ntpd_enabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_at_deny_not_exist_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·that·/etc/at.deny·does·not·exist</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_at_deny_not_exist_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_overflow_action_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·Rsyslog·Authenticates·Off-Loaded·Audit·Records</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 95 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-account_disable_post_pw_expiration_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Set·Account·Expiration·Following·Inactivity</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-account_disable_post_pw_expiration_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_p | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_p | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_gid_zero_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·Root·Has·A·Primary·GID·0</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_root_gid_zero_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_weekly_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_gshadow_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/gshadow</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_gshadow_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 863977/876880 bytes (98.53%) of diff not shown. | |||
| Offset 71, 226 lines modified | Offset 71, 226 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="system_with_kernel"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="package_firewalld"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="package_audit"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_p | 98 | ····<cpe-lang:platform·id="package_pam"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_p | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="not_bootc"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> | ||
| 104 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_rsys | 114 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 121 | ····<cpe-lang:platform·id="package_bind"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 118 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="not_aa | 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | 130 | ········</cpe-lang:logical-test> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | 133 | ········</cpe-lang:logical-test> |
| 128 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 140 | ········</cpe-lang:logical-test> | ||
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_yum"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 144 | ······ | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="machine"> | ||
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_systemd"> | 162 | ····<cpe-lang:platform·id="package_systemd"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="package_ | 167 | ····<cpe-lang:platform·id="package_avahi_and_system_with_kernel"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="package_ | 173 | ····<cpe-lang:platform·id="package_gdm"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 177 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id=" | 178 | ····<cpe-lang:platform·id="package_logrotate"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 181 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 182 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id="package_ | 183 | ····<cpe-lang:platform·id="package_postfix"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 186 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 187 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="package_ | 188 | ····<cpe-lang:platform·id="package_ntp"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 189 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> | ||
| Max diff block lines reached; 657120/671994 bytes (97.79%) of diff not shown. | |||
| Offset 3, 3699 lines modified | Offset 3, 3699 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-disable_users_coredumps_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Disable·Core·Dumps·for·All·Users</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-disable_users_coredumps_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-postfix_network_listening_disabled_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_xorg-x11-server-common_removed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Remove·the·X·Windows·Package·Group</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-p | 19 | ········<ocil:test_action_ref>ocil:ssg-package_xorg-x11-server-common_removed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_daily_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Group·Who·Owns·cron.daily</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify· | 41 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-file_ | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-s | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_info_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Set·LogLevel·to·INFO</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_info_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-s | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_dev_shm_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Ensure·/dev/shm·is·configured</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-partition_for_dev_shm_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_library_dirs_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Restrictive·Permissions</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-prefer_64bit_os_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Prefer·to·use·a·64-bit·Operating·System·when·supported</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-prefer_64bit_os_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-selinux_state_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·SELinux·State·is·Enforcing</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-selinux_state_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify· | 89 | ······<ocil:title>Verify·Permissions·on·/etc/cron.allow·file</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_ | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_clock_settime_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Record·Attempts·to·Alter·Time·Through·clock_settime</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_clock_settime_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_fs_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·kernel·debugfs</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_fs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_setxattr_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_minlen_login_defs_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Set·Password·Minimum·Length·in·login.defs</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_minlen_login_defs_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_suid_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·All·SUID·Executables·Are·Authorized</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_suid_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_hourly_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Group·Who·Owns·cron.hourly</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 865082/877720 bytes (98.56%) of diff not shown. | |||
| Offset 71, 217 lines modified | Offset 71, 217 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="not_bootc"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 99 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="package_firewalld"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 113 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="package_audit"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ········ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 122 | ········</cpe-lang:logical-test> | ||
| 123 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="package_pam"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="not_bootc"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 108 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="package_system | 115 | ····<cpe-lang:platform·id="package_firewalld_and_package_nftables_and_system_with_kernel"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_ | 122 | ····<cpe-lang:platform·id="package_bind"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 152 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 153 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 154 | ····<cpe-lang:platform·id="package_ | 127 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 131 | ········</cpe-lang:logical-test> | ||
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 134 | ········</cpe-lang:logical-test> | ||
| 157 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id=" | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 141 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_yum"> | 148 | ····<cpe-lang:platform·id="package_yum"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id=" | 158 | ····<cpe-lang:platform·id="machine"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 178 | ········</cpe-lang:logical-test> | ||
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 180 | ········ | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 181 | ········</cpe-lang:logical-test> | ||
| 182 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 184 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="wifi-iface"> |
| Max diff block lines reached; 631069/644081 bytes (97.98%) of diff not shown. | |||
| Offset 3, 3907 lines modified | Offset 3, 3907 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-p | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-p | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-ensure_root_password_configured_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_finit_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·and·Unloading·-·finit_module</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_finit_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-disable_users_coredumps_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Core·Dumps·for·All·Users</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-disable_users_coredumps_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_s | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_usr_share_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Record· | 29 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls·in·usr/share</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit_s | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_usr_share_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_root_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_restorecon_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_group_ownership_var_log_audit_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>System·Audit·Logs·Must·Be·Group·Owned·By·Root</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_group_ownership_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-a | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_su_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·su</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-a | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_su_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-service_kdump_disabled_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Disable·KDump·Kernel·Crash·Analyzer·(kdump)</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-service_kdump_disabled_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-configure_crypto_policy_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv6·Interfaces</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-conf | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_gid_zero_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify· | 71 | ······<ocil:title>Verify·Root·Has·A·Primary·GID·0</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_root_gid_zero_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_audit_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Record·Access·Events·to·Audit·Log·Directory</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-directory_access_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_semanage_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_audit_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0640·or·Less·Permissive</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_issue_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·permissions·on·System·Login·Banner</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_postdrop_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·postdrop</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_postdrop_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_core_pattern_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·storing·core·dumps</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_core_pattern_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Disable·X11·Forwarding</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-package_vsftpd_removed_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_lock_delay_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Set·GNOME3·Screensaver·Lock·Delay·After·Activation·Period</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_lock_delay_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1009431/1021936 bytes (98.78%) of diff not shown. | |||
| Offset 3, 4117 lines modified | Offset 3, 4117 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_sgid_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·All·SGID·Executables·Are·Authorized</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_sgid_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-ensure_redhat_gpgkey_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·Red·Hat·GPG·Key·Installed</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-ensure_redhat_gpgkey_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>The·Postfix·package·is·installed</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-package_postfix_installed_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-package_chrony_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>The·Chrony·package·is·installed</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-package_chrony_installed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable· | 35 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_home_directories_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lsetxattr</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lsetxattr_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_min_life_existing_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·openat</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_openat_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chmod</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chmod_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_issue_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Modify·the·System·Login·Banner</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-no_direct_root_logins_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Direct·root·Logins·Not·Allowed</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-no_direct_root_logins_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_writable_hooks_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·mutable·hooks</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_writable_hooks_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify· | 83 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-file_ | 85 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_efi_grub2_cfg_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify· | 89 | ······<ocil:title>Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_efi_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_e | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_motd_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·ownership·of·Message·of·the·Day·Banner</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_e | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Disable·Accepting·Router·Advertisements·on·all·IPv6·Interfaces·by·Default</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_id_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·gnutls-utils·is·installed</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_gnutls-utils_installed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 997838/1010571 bytes (98.74%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="n | 88 | ····<cpe-lang:platform·id="package_squid_and_system_with_kernel"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="package_firewalld"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_ | 99 | ····<cpe-lang:platform·id="package_audit"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_ | 104 | ····<cpe-lang:platform·id="package_pam"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="not_bootc"> |
| 115 | ······<cpe-lang:logical-test·operator=" | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="package_rsys | 114 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_ | 121 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_b | 126 | ····<cpe-lang:platform·id="package_bind"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_b | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="not_aa | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | 135 | ········</cpe-lang:logical-test> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 144 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 145 | ········</cpe-lang:logical-test> | ||
| 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 148 | ········</cpe-lang:logical-test> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_yum"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-sys | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_ | 162 | ····<cpe-lang:platform·id="package_bash"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="uefi"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 173 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 174 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 175 | ····<cpe-lang:platform·id=" | 172 | ····<cpe-lang:platform·id="machine"> |
| 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| 180 | ····<cpe-lang:platform·id=" | 177 | ····<cpe-lang:platform·id="wifi-iface"> |
| 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-i | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 183 | ······</cpe-lang:logical-test> | 180 | ······</cpe-lang:logical-test> |
| 184 | ····</cpe-lang:platform> | 181 | ····</cpe-lang:platform> |
| 185 | ····<cpe-lang:platform·id="package_y | 182 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| Max diff block lines reached; 757156/772550 bytes (98.01%) of diff not shown. | |||
| Offset 3, 5885 lines modified | Offset 3, 5885 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_bug_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·support·for·BUG()</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_bug_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-p | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_at_allow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Permissions·on·/etc/at.allow·file</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-p | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_at_allow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_ | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_watch_localtime_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Set·PAM''s·Password·Hashing·Algorithm</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_systemauth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·Accepting·ICMP·Redirects· | 41 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_ | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_vdso_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·the· | 47 | ······<ocil:title>Disable·the·32-bit·vDSO</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_vdso_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_crond_enabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_crond_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-ensure_redhat_gpgkey_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·Red·Hat·GPG·Key·Installed</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-ensure_redhat_gpgkey_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Permissions·on·/etc/cron.allow·file</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_rp_filter_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sysadmin_actions_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_at_allow_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify· | 83 | ······<ocil:title>Verify·User·Who·Owns·/etc/at.allow·file</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-file_ | 85 | ········<ocil:test_action_ref>ocil:ssg-file_owner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure· | 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·and·Unloading</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>En | 95 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_ipv6_option_disabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·IPv6·Networking·Support·Automatic·Loading</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_ipv6_option_disabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_tcp_syncookies_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_server_directive_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·Chrony·is·only·configured·with·the·server·directive</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-chronyd_server_directive_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_sshd_config_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Group·Who·Owns·SSH·Server·config·file</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_sshd_config_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_sgid_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Ensure·All·SGID·Executables·Are·Authorized</ocil:title> |
| Max diff block lines reached; 996999/1009792 bytes (98.73%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="n | 88 | ····<cpe-lang:platform·id="package_squid_and_system_with_kernel"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="package_firewalld"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_ | 99 | ····<cpe-lang:platform·id="package_audit"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_ | 104 | ····<cpe-lang:platform·id="package_pam"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="not_bootc"> |
| 115 | ······<cpe-lang:logical-test·operator=" | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="package_rsys | 114 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_ | 121 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_b | 126 | ····<cpe-lang:platform·id="package_bind"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_b | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="not_aa | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | 135 | ········</cpe-lang:logical-test> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 144 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 145 | ········</cpe-lang:logical-test> | ||
| 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 148 | ········</cpe-lang:logical-test> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_yum"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-sys | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_ | 162 | ····<cpe-lang:platform·id="package_bash"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="uefi"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 173 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 174 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 175 | ····<cpe-lang:platform·id=" | 172 | ····<cpe-lang:platform·id="machine"> |
| 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| 180 | ····<cpe-lang:platform·id=" | 177 | ····<cpe-lang:platform·id="wifi-iface"> |
| 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-i | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 183 | ······</cpe-lang:logical-test> | 180 | ······</cpe-lang:logical-test> |
| 184 | ····</cpe-lang:platform> | 181 | ····</cpe-lang:platform> |
| 185 | ····<cpe-lang:platform·id="package_y | 182 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| Max diff block lines reached; 756632/771971 bytes (98.01%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of | 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 94 lines modified | Offset 112, 94 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_d | 119 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_d | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id=" | 124 | ········<cpe-lang:platform·id="system_with_kernel"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id="package_ | 129 | ········<cpe-lang:platform·id="package_firewalld"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 133 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 134 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 135 | ········<cpe-lang:platform·id="package_ | 134 | ········<cpe-lang:platform·id="package_audit"> |
| 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 138 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 139 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 140 | ········<cpe-lang:platform·id=" | 139 | ········<cpe-lang:platform·id="package_pam"> |
| 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 144 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 145 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 146 | ········<cpe-lang:platform·id=" | 144 | ········<cpe-lang:platform·id="package_bash"> |
| 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 149 | ··········</cpe-lang:logical-test> | 147 | ··········</cpe-lang:logical-test> |
| 150 | ········</cpe-lang:platform> | 148 | ········</cpe-lang:platform> |
| 151 | ········<cpe-lang:platform·id=" | 149 | ········<cpe-lang:platform·id="uefi"> |
| 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 154 | ··········</cpe-lang:logical-test> | 152 | ··········</cpe-lang:logical-test> |
| 155 | ········</cpe-lang:platform> | 153 | ········</cpe-lang:platform> |
| 156 | ········<cpe-lang:platform·id="machine"> | 154 | ········<cpe-lang:platform·id="machine"> |
| 157 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ··········</cpe-lang:logical-test> | 157 | ··········</cpe-lang:logical-test> |
| 160 | ········</cpe-lang:platform> | 158 | ········</cpe-lang:platform> |
| 161 | ········<cpe-lang:platform·id="package_gdm"> | 159 | ········<cpe-lang:platform·id="package_gdm"> |
| 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 164 | ··········</cpe-lang:logical-test> | 162 | ··········</cpe-lang:logical-test> |
| 165 | ········</cpe-lang:platform> | 163 | ········</cpe-lang:platform> |
| 166 | ········<cpe-lang:platform·id="package_pam"> | ||
| 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 169 | ··········</cpe-lang:logical-test> | ||
| 170 | ········</cpe-lang:platform> | ||
| 171 | ········<cpe-lang:platform·id="non-uefi"> | 164 | ········<cpe-lang:platform·id="non-uefi"> |
| 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id=" | 169 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id="system_with_kernel"> | 175 | ········<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 185 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 186 | ········<cpe-lang:platform·id="package_ | 181 | ········<cpe-lang:platform·id="package_dnf"> |
| 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | ||
| 185 | ········</cpe-lang:platform> | ||
| 186 | ········<cpe-lang:platform·id="package_sudo"> | ||
| 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 189 | ··········</cpe-lang:logical-test> | 189 | ··········</cpe-lang:logical-test> |
| 190 | ········</cpe-lang:platform> | 190 | ········</cpe-lang:platform> |
| 191 | ········<cpe-lang:platform·id="package_chrony"> | 191 | ········<cpe-lang:platform·id="package_chrony"> |
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 194 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 195 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 196 | ········<cpe-lang:platform·id="package_s | 196 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_s | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 199 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| Max diff block lines reached; 498932/511718 bytes (97.50%) of diff not shown. | |||
| Offset 3, 1865 lines modified | Offset 3, 1955 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_rsync_removed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Uninstall·rsync·Package</ocil:title> | ||
| 11 | ······<ocil:title>Verify·Permissions·on·passwd·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_passwd_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·SELinux·is·Not·Disabled</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_rsync_removed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_idle_delay_ocil:questionnaire:1"> | ||
| 23 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet-server_removed_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minlen_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Length</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_minlen_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_have_homedir_login_defs_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·Home·Directories·are·Created·for·New·Users</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_have_homedir_login_defs_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_nfs-utils_removed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Uninstall·nfs-utils·Package</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-package_nfs-utils_removed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Disable·the·Automounter</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-service_autofs_disabled_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-s | 46 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·S | 47 | ······<ocil:title>Ensure·SELinux·is·Not·Disabled</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-selinux_not_disabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_never_disabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·gpgcheck·Enabled·for·All·dnf·Package·Repositories</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_never_disabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_deny_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_pubkey_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·PubkeyAuthentication·Authentication</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·the·Default·Bash·Umask·is·Set·Correctly</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_bashrc_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_ocil:questionnaire:1"> | ||
| 83 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_aide_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Install·AIDE</ocil:title> | ||
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_aide_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> | 88 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> | 89 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> | 91 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_issue_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Modify·the·System·Login·Banner</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_ucredit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure· | 101 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Uppercase·Characters</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_ucredit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| Max diff block lines reached; 222366/234393 bytes (94.87%) of diff not shown. | |||
| Offset 71, 94 lines modified | Offset 71, 94 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_d | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_d | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="package_firewalld"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="package_audit"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="package_pam"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="package_bash"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 108 | ····<cpe-lang:platform·id="uefi"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="machine"> | 113 | ····<cpe-lang:platform·id="machine"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="package_gdm"> | 118 | ····<cpe-lang:platform·id="package_gdm"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_pam"> | ||
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="non-uefi"> | 123 | ····<cpe-lang:platform·id="non-uefi"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 126 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 127 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 128 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="system_with_kernel"> | 134 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_ | 140 | ····<cpe-lang:platform·id="package_dnf"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | ||
| 144 | ····</cpe-lang:platform> | ||
| 145 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_chrony"> | 150 | ····<cpe-lang:platform·id="package_chrony"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_s | 155 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_s | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 160 | ··</cpe-lang:platform-specification> | 160 | ··</cpe-lang:platform-specification> |
| 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> | 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> |
| 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> | 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> |
| 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> | 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> |
| 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| Offset 802, 24 lines modified | Offset 802, 14 lines modified | ||
| 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> | 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> |
| 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> | 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> |
| 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> | 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> |
| 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> | 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> |
| 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> | 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> |
| 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> | 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> |
| 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> | 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> |
| 809 | ··············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_aide_installed">[[packages]] | ||
| 810 | name·=·"aide" | ||
| 811 | version·=·"*"</xccdf-1.2:fix> | ||
| 812 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_aide | ||
| 813 | class·install_aide·{ | ||
| 814 | ··package·{·'aide': | ||
| 815 | ····ensure·=>·'installed', | ||
| 816 | ··} | ||
| 817 | }</xccdf-1.2:fix> | ||
| 818 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts | 809 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts |
| 819 | ··package_facts: | 810 | ··package_facts: |
| 820 | ····manager:·auto | 811 | ····manager:·auto |
| 821 | ··tags: | 812 | ··tags: |
| 822 | ··-·CJIS-5.10.1.3 | 813 | ··-·CJIS-5.10.1.3 |
| 823 | ··-·NIST-800-53-CM-6(a) | 814 | ··-·NIST-800-53-CM-6(a) |
| 824 | ··-·PCI-DSS-Req-11.5 | 815 | ··-·PCI-DSS-Req-11.5 |
| Offset 843, 14 lines modified | Offset 833, 24 lines modified | ||
| Max diff block lines reached; 244619/256450 bytes (95.39%) of diff not shown. | |||
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 563, 15 lines modified | Offset 563, 15 lines modified | ||
| 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 564 | ············</xccdf-1.2:check> | 564 | ············</xccdf-1.2:check> |
| 565 | ··········</xccdf-1.2:Rule> | 565 | ··········</xccdf-1.2:Rule> |
| 566 | ········</xccdf-1.2:Group> | 566 | ········</xccdf-1.2:Group> |
| 567 | ······</xccdf-1.2:Group> | 567 | ······</xccdf-1.2:Group> |
| 568 | ····</xccdf-1.2:Benchmark> | 568 | ····</xccdf-1.2:Benchmark> |
| 569 | ··</ds:component> | 569 | ··</ds:component> |
| 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-0 | 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 572 | ······<oval-def:generator> | 572 | ······<oval-def:generator> |
| 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 575 | ········<oval:schema_version>5.11</oval:schema_version> | 575 | ········<oval:schema_version>5.11</oval:schema_version> |
| 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 577 | ······</oval-def:generator> | 577 | ······</oval-def:generator> |
| Offset 600, 74 lines modified | Offset 600, 74 lines modified | ||
| 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 602 | ··········<ind:instance·datatype="int">1</ind:instance> | 602 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 603 | ········</ind:textfilecontent54_object> | 603 | ········</ind:textfilecontent54_object> |
| 604 | ······</oval-def:objects> | 604 | ······</oval-def:objects> |
| 605 | ····</oval-def:oval_definitions> | 605 | ····</oval-def:oval_definitions> |
| 606 | ··</ds:component> | 606 | ··</ds:component> |
| 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-0 | 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 608 | ····<ocil:ocil> | 608 | ····<ocil:ocil> |
| 609 | ······<ocil:generator> | 609 | ······<ocil:generator> |
| 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 612 | ········<ocil:schema_version>2.0</ocil:schema_version> | 612 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 614 | ······</ocil:generator> | 614 | ······</ocil:generator> |
| 615 | ······<ocil:questionnaires> | 615 | ······<ocil:questionnaires> |
| 616 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | ||
| 617 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | ||
| 618 | ··········<ocil:actions> | ||
| 619 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | ||
| 620 | ··········</ocil:actions> | ||
| 621 | ········</ocil:questionnaire> | ||
| 622 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | 616 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> |
| 623 | ··········<ocil:title>Enable·audit·Service</ocil:title> | 617 | ··········<ocil:title>Enable·audit·Service</ocil:title> |
| 624 | ··········<ocil:actions> | 618 | ··········<ocil:actions> |
| 625 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | 619 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> |
| 626 | ··········</ocil:actions> | 620 | ··········</ocil:actions> |
| 627 | ········</ocil:questionnaire> | 621 | ········</ocil:questionnaire> |
| 622 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | ||
| 623 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | ||
| 624 | ··········<ocil:actions> | ||
| 625 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | ||
| 626 | ··········</ocil:actions> | ||
| 627 | ········</ocil:questionnaire> | ||
| 628 | ······</ocil:questionnaires> | 628 | ······</ocil:questionnaires> |
| 629 | ······<ocil:test_actions> | 629 | ······<ocil:test_actions> |
| 630 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 630 | ········<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 631 | ··········<ocil:when_true> | 631 | ··········<ocil:when_true> |
| 632 | ············<ocil:result>PASS</ocil:result> | 632 | ············<ocil:result>PASS</ocil:result> |
| 633 | ··········</ocil:when_true> | 633 | ··········</ocil:when_true> |
| 634 | ··········<ocil:when_false> | 634 | ··········<ocil:when_false> |
| 635 | ············<ocil:result>FAIL</ocil:result> | 635 | ············<ocil:result>FAIL</ocil:result> |
| 636 | ··········</ocil:when_false> | 636 | ··········</ocil:when_false> |
| 637 | ········</ocil:boolean_question_test_action> | 637 | ········</ocil:boolean_question_test_action> |
| 638 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 638 | ········<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 639 | ··········<ocil:when_true> | 639 | ··········<ocil:when_true> |
| 640 | ············<ocil:result>PASS</ocil:result> | 640 | ············<ocil:result>PASS</ocil:result> |
| 641 | ··········</ocil:when_true> | 641 | ··········</ocil:when_true> |
| 642 | ··········<ocil:when_false> | 642 | ··········<ocil:when_false> |
| 643 | ············<ocil:result>FAIL</ocil:result> | 643 | ············<ocil:result>FAIL</ocil:result> |
| 644 | ··········</ocil:when_false> | 644 | ··········</ocil:when_false> |
| 645 | ········</ocil:boolean_question_test_action> | 645 | ········</ocil:boolean_question_test_action> |
| 646 | ······</ocil:test_actions> | 646 | ······</ocil:test_actions> |
| 647 | ······<ocil:questions> | 647 | ······<ocil:questions> |
| 648 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 649 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 650 | following·command: | ||
| 651 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 652 | The·output·should·contain·ahlt | ||
| 653 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 654 | ········</ocil:boolean_question> | ||
| 655 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 648 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 656 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 649 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 657 | following·command: | 650 | following·command: |
| 658 | $·sudo·launchctl·list·com.apple.auditd | 651 | $·sudo·launchctl·list·com.apple.auditd |
| 659 | The·output·should·return·process·information·for | 652 | The·output·should·return·process·information·for |
| 660 | com.apple.auditd | 653 | com.apple.auditd |
| 661 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 654 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 662 | ········</ocil:boolean_question> | 655 | ········</ocil:boolean_question> |
| 656 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 657 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 658 | following·command: | ||
| 659 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 660 | The·output·should·contain·ahlt | ||
| 661 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 662 | ········</ocil:boolean_question> | ||
| 663 | ······</ocil:questions> | 663 | ······</ocil:questions> |
| 664 | ····</ocil:ocil> | 664 | ····</ocil:ocil> |
| 665 | ··</ds:component> | 665 | ··</ds:component> |
| 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-0 | 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 668 | ······<oval-def:generator> | 668 | ······<oval-def:generator> |
| 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> | 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.3</oval:product_version> |
| 671 | ········<oval:schema_version>5.11</oval:schema_version> | 671 | ········<oval:schema_version>5.11</oval:schema_version> |
| 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 673 | ······</oval-def:generator> | 673 | ······</oval-def:generator> |
| Max diff block lines reached; -1/9122 bytes (-0.01%) of diff not shown. | |||
| Offset 3, 56 lines modified | Offset 3, 56 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Enable·audit·Service</ocil:title> | 11 | ······<ocil:title>Enable·audit·Service</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ··</ocil:questionnaires> | 22 | ··</ocil:questionnaires> |
| 23 | ··<ocil:test_actions> | 23 | ··<ocil:test_actions> |
| 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 25 | ······<ocil:when_true> | 25 | ······<ocil:when_true> |
| 26 | ········<ocil:result>PASS</ocil:result> | 26 | ········<ocil:result>PASS</ocil:result> |
| 27 | ······</ocil:when_true> | 27 | ······</ocil:when_true> |
| 28 | ······<ocil:when_false> | 28 | ······<ocil:when_false> |
| 29 | ········<ocil:result>FAIL</ocil:result> | 29 | ········<ocil:result>FAIL</ocil:result> |
| 30 | ······</ocil:when_false> | 30 | ······</ocil:when_false> |
| 31 | ····</ocil:boolean_question_test_action> | 31 | ····</ocil:boolean_question_test_action> |
| 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 33 | ······<ocil:when_true> | 33 | ······<ocil:when_true> |
| 34 | ········<ocil:result>PASS</ocil:result> | 34 | ········<ocil:result>PASS</ocil:result> |
| 35 | ······</ocil:when_true> | 35 | ······</ocil:when_true> |
| 36 | ······<ocil:when_false> | 36 | ······<ocil:when_false> |
| 37 | ········<ocil:result>FAIL</ocil:result> | 37 | ········<ocil:result>FAIL</ocil:result> |
| 38 | ······</ocil:when_false> | 38 | ······</ocil:when_false> |
| 39 | ····</ocil:boolean_question_test_action> | 39 | ····</ocil:boolean_question_test_action> |
| 40 | ··</ocil:test_actions> | 40 | ··</ocil:test_actions> |
| 41 | ··<ocil:questions> | 41 | ··<ocil:questions> |
| 42 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 44 | following·command: | ||
| 45 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 46 | The·output·should·contain·ahlt | ||
| 47 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 48 | ····</ocil:boolean_question> | ||
| 49 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 42 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 50 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 51 | following·command: | 44 | following·command: |
| 52 | $·sudo·launchctl·list·com.apple.auditd | 45 | $·sudo·launchctl·list·com.apple.auditd |
| 53 | The·output·should·return·process·information·for | 46 | The·output·should·return·process·information·for |
| 54 | com.apple.auditd | 47 | com.apple.auditd |
| 55 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 48 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 56 | ····</ocil:boolean_question> | 49 | ····</ocil:boolean_question> |
| 50 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 51 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 52 | following·command: | ||
| 53 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 54 | The·output·should·contain·ahlt | ||
| 55 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 56 | ····</ocil:boolean_question> | ||
| 57 | ··</ocil:questions> | 57 | ··</ocil:questions> |
| 58 | </ocil:ocil> | 58 | </ocil:ocil> |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> |
| Offset 111, 15 lines modified | Offset 111, 15 lines modified | ||
| 111 | ······</cpe-dict:cpe-item> | 111 | ······</cpe-dict:cpe-item> |
| 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> | 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> |
| 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> | 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> |
| 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> | 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> |
| 115 | ······</cpe-dict:cpe-item> | 115 | ······</cpe-dict:cpe-item> |
| 116 | ····</cpe-dict:cpe-list> | 116 | ····</cpe-dict:cpe-list> |
| 117 | ··</ds:component> | 117 | ··</ds:component> |
| 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-0 | 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 122 | ······<xccdf-1.2:description> | 122 | ······<xccdf-1.2:description> |
| 123 | ········This·guide·presents·a·catalog·of·security-relevant | 123 | ········This·guide·presents·a·catalog·of·security-relevant |
| 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 189, 197 lines modified | Offset 189, 197 lines modified | ||
| 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 195 | ······<cpe-lang:platform-specification> | 195 | ······<cpe-lang:platform-specification> |
| 196 | ········<cpe-lang:platform·id="ocp4- | 196 | ········<cpe-lang:platform·id="ocp4-on-sdn"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 200 | ··········</cpe-lang:logical-test> | ||
| 201 | ········</cpe-lang:platform> | ||
| 202 | ········<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 203 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 204 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 205 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 206 | ··········</cpe-lang:logical-test> | ||
| 207 | ········</cpe-lang:platform> | ||
| 208 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 209 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 210 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 211 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 212 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 213 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| 214 | ········<cpe-lang:platform·id="ocp4-node-on-sdn"> | 201 | ········<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 215 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 216 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | 203 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 217 | ··········</cpe-lang:logical-test> | 204 | ··········</cpe-lang:logical-test> |
| 218 | ········</cpe-lang:platform> | 205 | ········</cpe-lang:platform> |
| 219 | ········<cpe-lang:platform·id="ocp4-on-a | 206 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 220 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 207 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 208 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 209 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 210 | ············</cpe-lang:logical-test> | ||
| 211 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 212 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 221 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4 | 213 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 214 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 215 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 216 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 217 | ············</cpe-lang:logical-test> | ||
| 222 | ··········</cpe-lang:logical-test> | 218 | ··········</cpe-lang:logical-test> |
| 223 | ········</cpe-lang:platform> | 219 | ········</cpe-lang:platform> |
| 224 | ········<cpe-lang:platform·id="ocp4-n | 220 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 225 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 221 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 222 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 226 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 223 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 224 | ············</cpe-lang:logical-test> | ||
| 225 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 227 | ··········</cpe-lang:logical-test> | 226 | ··········</cpe-lang:logical-test> |
| 228 | ········</cpe-lang:platform> | 227 | ········</cpe-lang:platform> |
| 229 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | 228 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> |
| 230 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 229 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 231 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 230 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 232 | ··········</cpe-lang:logical-test> | 231 | ··········</cpe-lang:logical-test> |
| 233 | ········</cpe-lang:platform> | 232 | ········</cpe-lang:platform> |
| 233 | ········<cpe-lang:platform·id="ocp4-master-node"> | ||
| 234 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 235 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | ||
| 236 | ··········</cpe-lang:logical-test> | ||
| 237 | ········</cpe-lang:platform> | ||
| 238 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> | ||
| 239 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 240 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 241 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 242 | ············</cpe-lang:logical-test> | ||
| 243 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 244 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 245 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 246 | ············</cpe-lang:logical-test> | ||
| 247 | ··········</cpe-lang:logical-test> | ||
| 248 | ········</cpe-lang:platform> | ||
| 249 | ········<cpe-lang:platform·id="ocp4-node"> | ||
| 250 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 251 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 252 | ··········</cpe-lang:logical-test> | ||
| 253 | ········</cpe-lang:platform> | ||
| 234 | ········<cpe-lang:platform·id="ocp4-on-gcp"> | 254 | ········<cpe-lang:platform·id="ocp4-on-gcp"> |
| 235 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 255 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 236 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> | 256 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 237 | ··········</cpe-lang:logical-test> | 257 | ··········</cpe-lang:logical-test> |
| 238 | ········</cpe-lang:platform> | 258 | ········</cpe-lang:platform> |
| 259 | ········<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | ||
| 260 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 261 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 262 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 263 | ··········</cpe-lang:logical-test> | ||
| 264 | ········</cpe-lang:platform> | ||
| 265 | ········<cpe-lang:platform·id="ocp4.16"> | ||
| 266 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 267 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 268 | ··········</cpe-lang:logical-test> | ||
| 269 | ········</cpe-lang:platform> | ||
| 239 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | 270 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| Max diff block lines reached; 913650/925712 bytes (98.70%) of diff not shown. | |||
| Offset 3, 3461 lines modified | Offset 3, 3461 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_oauth_audit_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-api_server_https_for_kubelet_conn_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·that·the·--kubelet-https·argument·is·set·to·true</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-api_server_https_for_kubelet_conn_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-resource_requests_quota_per_project_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-a | 22 | ····<ocil:questionnaire·id="ocil:ssg-acs_sensor_exists_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·that·Advanced·Cluster·Security·(ACS)·Sensor·is·deployed</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-a | 25 | ········<ocil:test_action_ref>ocil:ssg-acs_sensor_exists_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_cipher_suites_openshiftapiserver_operator_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_profile_set_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-api_server_admission_control_plugin_namespacelifecycle_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·the·NamespaceLifecycle·Admission·Control·Plugin</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-api_server_admission_control_plugin_namespacelifecycle_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_log_forwarding_uses_tls_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·that·Audit·Log·Forwarding·Uses·TLS</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_log_forwarding_uses_tls_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-idp_is_configured_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Configure·An·Identity·Provider</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-idp_is_configured_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etcd_data_dir_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Group·Who·Owns·The·Etcd·Database·Directory</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etcd_data_dir_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ovs_sys_id_conf_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 65 | ······<ocil:title>Verify·Group·Who·Owns·The·Open·vSwitch·Persistent·System·ID</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_ | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ovs_sys_id_conf_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etcd_data_files_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify· | 71 | ······<ocil:title>Verify·Permissions·on·the·Etcd·Write-Ahead-Log·Files</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_ | 73 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etcd_data_files_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ovs_pid_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Group·Who·Owns·The·Open·vSwitch·Process·ID·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ovs_pid_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-api_server_admission_control_plugin_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-api_server_admission_control_plugin_noderestriction_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>En | 83 | ······<ocil:title>Enable·the·NodeRestriction·Admission·Control·Plugin</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-api_server_admission_control_plugin_ | 85 | ········<ocil:test_action_ref>ocil:ssg-api_server_admission_control_plugin_noderestriction_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_master_admin_kubeconfigs_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-scc_limit_process_id_namespace_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Limit·Access·to·the·Host·Process·ID·Namespace</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-scc_limit_process_id_namespace_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-ebs_encryption_enabled_on_machinesets_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_controller_manager_kubeconfig_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·Permissions·on·the·OpenShift·Controller·Manager·Kubeconfig·File</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_controller_manager_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_eviction_thresholds_set_hard_nodefs_inodesfree_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_openshift_sdn_cniserver_config_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·User·Who·Owns·The·OpenShift·SDN·CNI·Server·Config</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_openshift_sdn_cniserver_config_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_kube_apiserver_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·User·Who·Owns·The·Kubernetes·API·Server·Pod·Specification·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_owner_kube_apiserver_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-ocp_insecure_registries_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Check·if·any·insecure·registry·sources·is·configured</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-ocp_insecure_registries_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-ocp_api_server_audit_log_maxsize_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_min_version_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·Kubelet·is·configured·with·allowed·TLS·versions</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 846991/860285 bytes (98.45%) of diff not shown. | |||
| Offset 72, 197 lines modified | Offset 72, 197 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4- | 79 | ····<cpe-lang:platform·id="ocp4-on-sdn"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····</cpe-lang:platform> | ||
| 85 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 89 | ······</cpe-lang:logical-test> | ||
| 90 | ····</cpe-lang:platform> | ||
| 91 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 92 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 95 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 96 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 97 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> | 84 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 98 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 100 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 101 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 102 | ····<cpe-lang:platform·id="ocp4-on-a | 89 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4 | 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 105 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 106 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 107 | ····<cpe-lang:platform·id="ocp4-n | 103 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 110 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 111 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 112 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | 111 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> |
| 113 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 115 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 116 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="ocp4-master-node"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | ||
| 120 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> | ||
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ······</cpe-lang:logical-test> | ||
| 131 | ····</cpe-lang:platform> | ||
| 132 | ····<cpe-lang:platform·id="ocp4-node"> | ||
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | ||
| 136 | ····</cpe-lang:platform> | ||
| 117 | ····<cpe-lang:platform·id="ocp4-on-gcp"> | 137 | ····<cpe-lang:platform·id="ocp4-on-gcp"> |
| 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="ocp4.16"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 122 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | 153 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 123 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········ | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 133 | ········</cpe-lang:logical-test> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="ocp4-on- | 165 | ····<cpe-lang:platform·id="ocp4-on-aws"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | ||
| 169 | ····</cpe-lang:platform> | ||
| 170 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> | ||
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | 174 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 175 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15"> | 176 | ····<cpe-lang:platform·id="ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15"> |
| 143 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 177 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_11:def:1"/> | 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_11:def:1"/> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> | 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| Max diff block lines reached; 13797/26336 bytes (52.39%) of diff not shown. | |||
| Offset 3, 6127 lines modified | Offset 3, 6397 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·Core·Dumps·for·SUID·programs</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_suid_dumpable_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv4·Interfaces</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>D | 11 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nosuid_ocil:questionnaire:1"> | ||
| 41 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·Accepting·Router·Advertisements·on·All·IPv6·Interfaces</ocil:title> | ||
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_hourly_ocil:questionnaire:1"> | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_hourly_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify·Permissions·on·cron.hourly</ocil:title> | 29 | ······<ocil:title>Verify·Permissions·on·cron.hourly</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_hourly_action:testaction:1</ocil:test_action_ref> | 31 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> | ||
| 53 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-grub2_rng_core_default_quality_argument_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Configure·the·confidence·in·TPM·for·entropy</ocil:title> | ||
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-grub2_rng_core_default_quality_argument_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_compression_ocil:questionnaire:1"> | ||
| 65 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·No·World-Writable·Files·Exist</ocil:title> | ||
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_unauthorized_world_writable_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_compat_vdso_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Disable·the·32-bit·vDSO</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_compat_vdso_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> | ||
| 77 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable·x86·vsyscall·emulation</ocil:title> | ||
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_x86_vsyscall_emulation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> |
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 89 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·different·security·models</ocil:title> | ||
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sysadmin_actions_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 77 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sysadmin_actions_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_password_auth_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·Permissions·on·/var/log/messages·File</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_kerb_auth_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 89 | ······<ocil:title>Disable·Kerberos·Authentication</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_ | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_kerb_auth_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Account·Lockouts·Must·Persist</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_dir_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 101 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| Max diff block lines reached; 906031/917293 bytes (98.77%) of diff not shown. | |||
| Offset 71, 226 lines modified | Offset 71, 226 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="n | 88 | ····<cpe-lang:platform·id="package_squid_and_system_with_kernel"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_ | 94 | ····<cpe-lang:platform·id="package_firewalld"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_d | 99 | ····<cpe-lang:platform·id="package_audit"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_d | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="package_ | 104 | ····<cpe-lang:platform·id="package_pam"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="not_bootc"> |
| 120 | ······<cpe-lang:logical-test·operator=" | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_rsys | 114 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 121 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="not_aa | 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 139 | ········</cpe-lang:logical-test> | 130 | ········</cpe-lang:logical-test> |
| 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 142 | ········</cpe-lang:logical-test> | 133 | ········</cpe-lang:logical-test> |
| 143 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 140 | ········</cpe-lang:logical-test> | ||
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 148 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-sys | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="package_ | 152 | ····<cpe-lang:platform·id="package_bash"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="machine"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="wifi-iface"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="package_ | 167 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 177 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id=" | 173 | ····<cpe-lang:platform·id="package_systemd"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 182 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 177 | ····</cpe-lang:platform> |
| 184 | ····<cpe-lang:platform·id="package_ | 178 | ····<cpe-lang:platform·id="package_avahi_and_system_with_kernel"> |
| 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 188 | ······</cpe-lang:logical-test> | 182 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 706057/721450 bytes (97.87%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 172 lines modified | Offset 112, 172 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id=" | 119 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | ||
| 123 | ········</cpe-lang:platform> | ||
| 124 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 127 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id=" | 124 | ········<cpe-lang:platform·id="system_with_kernel"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 132 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="package_r | 129 | ········<cpe-lang:platform·id="package_firewalld"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_r | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 137 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id="package_ | 134 | ········<cpe-lang:platform·id="package_audit"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 139 | ········<cpe-lang:platform·id="package_pam"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 149 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 150 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 144 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 155 | ··········</cpe-lang:logical-test> | 149 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 150 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id="package_ | 151 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 155 | ············</cpe-lang:logical-test> | ||
| 156 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 158 | ············</cpe-lang:logical-test> | ||
| 160 | ··········</cpe-lang:logical-test> | 159 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 160 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id=" | 161 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 165 | ············</cpe-lang:logical-test> | ||
| 166 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 167 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 168 | ············</cpe-lang:logical-test> | ||
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 165 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id="package_ | 172 | ········<cpe-lang:platform·id="package_bash"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 171 | ··········</cpe-lang:logical-test> | 175 | ··········</cpe-lang:logical-test> |
| 172 | ········</cpe-lang:platform> | 176 | ········</cpe-lang:platform> |
| 173 | ········<cpe-lang:platform·id="uefi"> | 177 | ········<cpe-lang:platform·id="uefi"> |
| 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 176 | ··········</cpe-lang:logical-test> | 180 | ··········</cpe-lang:logical-test> |
| 177 | ········</cpe-lang:platform> | 181 | ········</cpe-lang:platform> |
| 178 | ········<cpe-lang:platform·id=" | 182 | ········<cpe-lang:platform·id="wifi-iface"> |
| 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 181 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 182 | ············</cpe-lang:logical-test> | ||
| 183 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 184 | ············ | 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 185 | ············</cpe-lang:logical-test> | ||
| 186 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 187 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 188 | ········<cpe-lang:platform·id="package_s | 187 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 189 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 191 | ··········</cpe-lang:logical-test> | 191 | ··········</cpe-lang:logical-test> |
| 192 | ········</cpe-lang:platform> | 192 | ········</cpe-lang:platform> |
| 193 | ········<cpe-lang:platform·id="package_ | 193 | ········<cpe-lang:platform·id="package_avahi_and_system_with_kernel"> |
| 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1016987/1030860 bytes (98.65%) of diff not shown. | |||
| Offset 3, 1957 lines modified | Offset 3, 1957 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_d_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Permissions·on·cron.d</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_d_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmap_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-nftables_ensure_default_deny_policy_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_ip_forward_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_ip_forward_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_ignore_bogus_error_responses_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_daily_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Owner·on·cron.daily</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_use_strong_macs_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Use·Only·Strong·MACs</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_use_strong_macs_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Owner·on·cron.hourly</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Permissions·on·cron.daily</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-s | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_tcp_syncookies_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-s | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_tcp_syncookies_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-service_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_enabled_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify· | 65 | ······<ocil:title>Verify·nftables·Service·is·Enabled</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-service_ | 67 | ········<ocil:test_action_ref>ocil:ssg-service_nftables_enabled_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-servers_removed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Uninstall·openldap-servers·Package</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-servers_removed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_maxstartups_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·SSH·MaxStartups·is·configured</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_maxstartups_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-ss | 82 | ····<ocil:questionnaire·id="ocil:ssg-wireless_disable_interfaces_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Deactivate·Wireless·Network·Interfaces</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-ss | 85 | ········<ocil:test_action_ref>ocil:ssg-wireless_disable_interfaces_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_shadow_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify· | 89 | ······<ocil:title>Verify·Group·Who·Owns·Backup·shadow·File</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_ | 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_gshadow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/gshadow</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_gshadow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·Randomized·Layout·of·Virtual·Address·Space</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_ | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_randomize_va_space_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-set_firewalld_appropriate_zone_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_noexec_removable_partitions_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Add·noexec·Option·to·Removable·Media·Partitions</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-mount_option_noexec_removable_partitions_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-no_files_unowned_by_user_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_opasswd_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/security/opasswd</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_opasswd_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 530543/543276 bytes (97.66%) of diff not shown. | |||
| Offset 71, 172 lines modified | Offset 71, 172 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_r | 88 | ····<cpe-lang:platform·id="package_firewalld"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_r | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="package_audit"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="package_pam"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 103 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="package_ | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 117 | ········</cpe-lang:logical-test> | ||
| 119 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 124 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_ | 131 | ····<cpe-lang:platform·id="package_bash"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 130 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="uefi"> | 136 | ····<cpe-lang:platform·id="uefi"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="wifi-iface"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 141 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ········ | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_s | 146 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_ | 152 | ····<cpe-lang:platform·id="package_avahi_and_system_with_kernel"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="package_n | 158 | ····<cpe-lang:platform·id="package_ntp"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_n | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="non-uefi"> | 163 | ····<cpe-lang:platform·id="non-uefi"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="system_with_kernel"> | 173 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id=" | 180 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| Max diff block lines reached; 431242/445317 bytes (96.84%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 116, 163 lines modified | Offset 116, 163 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 128 | ········<cpe-lang:platform·id="package_ | 123 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 131 | ··········</cpe-lang:logical-test> | ||
| 132 | ········</cpe-lang:platform> | ||
| 133 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 134 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 137 | ··········</cpe-lang:logical-test> | ||
| 138 | ········</cpe-lang:platform> | ||
| 139 | ········<cpe-lang:platform·id="package_rsyslog"> | ||
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="system_with_kernel"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 148 | ············</cpe-lang:logical-test> | ||
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ············ | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | ||
| 152 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 153 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 154 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 157 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 158 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 159 | ········<cpe-lang:platform·id=" | 138 | ········<cpe-lang:platform·id="package_pam"> |
| 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 143 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id="package_s | 150 | ········<cpe-lang:platform·id="package_rsh-server"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 175 | ··········</cpe-lang:logical-test> | ||
| 176 | ········</cpe-lang:platform> | ||
| 177 | ········<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> | ||
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 181 | ··········</cpe-lang:logical-test> | ||
| 182 | ········</cpe-lang:platform> | ||
| 183 | ········<cpe-lang:platform·id="package_iptables"> | ||
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 186 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 187 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 188 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 155 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 189 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 190 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 191 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 192 | ············</cpe-lang:logical-test> | 159 | ············</cpe-lang:logical-test> |
| 193 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 160 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 194 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 161 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 195 | ············</cpe-lang:logical-test> | 162 | ············</cpe-lang:logical-test> |
| 196 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 197 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 198 | ········<cpe-lang:platform·id="package_s | 165 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 199 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 169 | ············</cpe-lang:logical-test> | ||
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 172 | ············</cpe-lang:logical-test> | ||
| 200 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 201 | ··········</cpe-lang:logical-test> | 174 | ··········</cpe-lang:logical-test> |
| 202 | ········</cpe-lang:platform> | 175 | ········</cpe-lang:platform> |
| 203 | ········<cpe-lang:platform·id=" | 176 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 204 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1186329/1198872 bytes (98.95%) of diff not shown. | |||
| Offset 3, 3009 lines modified | Offset 3, 3009 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_messages_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify·User·Who·Owns·/var/log/messages·File</ocil:title> | ||
| 11 | ······<ocil:title>Enable·cron·Service</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-service_cron_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_root_target_ocil:questionnaire:1"> | ||
| 23 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-a | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-a | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_audit_configuration_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Root</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_ | 31 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_no_sanity_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>En | 35 | ······<ocil:title>Enable·poison·without·sanity·check</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_poisoning_no_sanity_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_shutdown_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·systemd-journald·Service</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-service_systemd-journald_enabled_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> | ||
| 53 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> | ||
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_dmesg_restrict_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_syn_cookies_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Enable·TCP/IP·syncookie·support</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_syn_cookies_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit | 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_freq_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-audit | 79 | ········<ocil:test_action_ref>ocil:ssg-auditd_freq_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_overflow_action_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Appropriate·Action·Must·be·Setup·When·the·Internal·Audit·Event·Queue·is·Full</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-auditd_overflow_action_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Enable·checks·on·credential·management</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_credentials_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-auditd_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Configure·auditd·space_left·Action·on·Low·Disk·Space</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-auditd_ | 109 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_action_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·Yama·support</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_yama_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 647558/659539 bytes (98.18%) of diff not shown. | |||
| Offset 71, 163 lines modified | Offset 71, 163 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="package_rsyslog"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 103 | ········</cpe-lang:logical-test> | ||
| 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 105 | ········ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 106 | ········</cpe-lang:logical-test> | ||
| 107 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="package_pam"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 98 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id="package_s | 105 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 130 | ······</cpe-lang:logical-test> | ||
| 131 | ····</cpe-lang:platform> | ||
| 132 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> | ||
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 136 | ······</cpe-lang:logical-test> | ||
| 137 | ····</cpe-lang:platform> | ||
| 138 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 147 | ········</cpe-lang:logical-test> | 114 | ········</cpe-lang:logical-test> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | 117 | ········</cpe-lang:logical-test> |
| 151 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="package_s | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 161 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id="machine"> | 136 | ····<cpe-lang:platform·id="machine"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | ||
| 145 | ····</cpe-lang:platform> | ||
| 168 | ····<cpe-lang:platform·id="package_gdm"> | 146 | ····<cpe-lang:platform·id="package_gdm"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_ | 151 | ····<cpe-lang:platform·id="package_logrotate"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id="package_ | 156 | ····<cpe-lang:platform·id="package_postfix"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id="system_with_kernel"> | 161 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| Max diff block lines reached; 481049/493215 bytes (97.53%) of diff not shown. | |||
| Offset 71, 353 lines modified | Offset 71, 353 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="krb5_server_older_than_1_17-18_and_krb5_workstation_older_than_1_17-18"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_server_older_than_1_17_18:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-krb5_workstation_older_than_1_17_18:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="mount_var"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="package_firewalld"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="package_audit"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="package_pam"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="not_osbuild_and_system_with_kernel"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 118 | ········</cpe-lang:logical-test> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="not_bootc"> |
| 125 | ······<cpe-lang:logical-test·operator=" | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 127 | ····<cpe-lang:platform·id="package_libreswan"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_ | 132 | ····<cpe-lang:platform·id="package_tmux"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_tmux:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 137 | ····<cpe-lang:platform·id="package_chrony_or_package_ntp"> |
| 142 | ······<cpe-lang:logical-test·operator=" | 138 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 143 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 149 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ········ | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ········ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | ||
| 159 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="package_bind"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_ | 166 | ····<cpe-lang:platform·id="package_usbguard"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_usbguard:def:1"/> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 177 | ······</cpe-lang:logical-test> | 169 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 170 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id=" | 171 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 174 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 175 | ········</cpe-lang:logical-test> | ||
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 178 | ········</cpe-lang:logical-test> | ||
| 182 | ······</cpe-lang:logical-test> | 179 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 180 | ····</cpe-lang:platform> |
| 184 | ····<cpe-lang:platform·id="not_aa | 181 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 183 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| Max diff block lines reached; 37475/53212 bytes (70.43%) of diff not shown. | |||
| Offset 3, 6532 lines modified | Offset 3, 6517 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-aide_verify_ext_attributes_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Configure·AIDE·to·Verify·Extended·Attributes</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-aide_verify_ext_attributes_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure· | 23 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlinkat</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlinkat_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_encrypt_sent_records_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Encrypt·Audit·Records·Sent·With·audispd·Plugin</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_encrypt_sent_records_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_gshadow_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Verify·Permissions·on·gshadow·File</ocil:title> | ||
| 36 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-permissions_ | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> | 41 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> |
| 36 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_name_ocil:questionnaire:1"> | ||
| 41 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> | ||
| 42 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-journald_forward_to_syslog_ocil:questionnaire:1"> | ||
| 47 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/group</ocil:title> | ||
| 48 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_group_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-service_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-service_vsftpd_disabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 59 | ······<ocil:title>Disable·vsftpd·Service</ocil:title> |
| 54 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-service_ | 61 | ········<ocil:test_action_ref>ocil:ssg-service_vsftpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> | ||
| 59 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Configure·auditd·mail_acct·Action·on·Low·Disk·Space</ocil:title> | ||
| 60 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_action_mail_acct_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-disable_users_coredumps_ocil:questionnaire:1"> | ||
| 65 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·ftruncate</ocil:title> | ||
| 66 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-di | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> | ||
| 71 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_existing_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Set·Existing·Passwords·Maximum·Age</ocil:title> | ||
| 72 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 79 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_max_life_existing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify· | 83 | ······<ocil:title>Verify·Group·Who·Owns·/etc/at.allow·file</ocil:title> |
| 78 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-package_dhcp_client_removed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 89 | ······<ocil:title>Uninstall·DHCP·Client·Package</ocil:title> |
| 84 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-package_dhcp_client_removed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 95 | ······<ocil:title>Set·Deny·For·Failed·Password·Attempts</ocil:title> |
| 90 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-smartcard_configure_cert_checking_ocil:questionnaire:1"> | ||
| 95 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_binary_dirs_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·that·System·Executables·Have·Restrictive·Permissions</ocil:title> | ||
| 96 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-i | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·that·System·Executables·Have·Root·Ownership</ocil:title> |
| 102 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-i | 109 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_truncate_ocil:questionnaire:1"> | ||
| 107 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_shadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·Group·Who·Owns·Backup·shadow·File</ocil:title> | ||
| 108 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-n | 118 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_nosuid_remote_filesystems_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 119 | ······<ocil:title>Mount·Remote·Filesystems·with·nosuid</ocil:title> |
| 114 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-n | 121 | ········<ocil:test_action_ref>ocil:ssg-mount_option_nosuid_remote_filesystems_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 992724/1004703 bytes (98.81%) of diff not shown. | |||